Description
Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON name and map share control
Remediation
References
https://hackerone.com/reports/99245
https://nodesecurity.io/advisories/74
Related Vulnerabilities
CVE-2023-36468 Vulnerability in maven package org.xwiki.platform:xwiki-platform-core
CVE-2022-21169 Vulnerability in npm package express-xss-sanitizer
CVE-2022-22984 Vulnerability in npm package snyk-sbt-plugin
CVE-2020-7681 Vulnerability in npm package marscode
CVE-2013-4152 Vulnerability in maven package org.springframework:spring-oxm