Maplibre vulnerabilities
We track 2 vulnerabilities in Maplibre products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 11, 2026.
2vulnerabilities
1critical
1high
0exploited
8.8average CVSS score
Latest Maplibre vulnerabilities
- 7.5 High severity
geojson-vt: Uncontrolled Recursion
geojson-vt is a JavaScript library for slicing GeoJSON data into vector tiles on the fly, primarily designed to enable rendering and interacting with large geospatial datasets on the browser side (without a server). Prior to version 6.1.1, @maplibre/geojson-vt
- 10.0 Critical severity
maplibre-gl-js: Improper Neutralization of Input During Web Page Generation
MapLibre GL JS is an interactive vector tile map library for web browsers. Prior to 6.4.1, DOM.sanitize() in src/util/dom.ts iterates elem.attributes as a live NamedNodeMap while removeAttributes() removes attributes from the same collection, shifting indexes