Description
Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON name and map share control
Remediation
References
https://hackerone.com/reports/99245
https://nodesecurity.io/advisories/74
Related Vulnerabilities
CVE-2021-21290 Vulnerability in maven package io.netty:netty-testsuite
CVE-2021-23760 Vulnerability in npm package keyget
CVE-2011-2087 Vulnerability in maven package org.apache.struts:struts2-javatemplates-plugin
CVE-2023-49446 Vulnerability in maven package com.jfinal:jfinal
CVE-2022-23596 Vulnerability in maven package com.github.junrar:junrar