maplibre-gl-js vulnerabilities

1 known vulnerability in maplibre-gl-js from Maplibre. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  maplibre-gl-js: Improper Neutralization of Input During Web Page Generation

  CVE-2026-85061Sep 3, 2026Maplibre

  MapLibre GL JS is an interactive vector tile map library for web browsers. Prior to 6.4.1, DOM.sanitize() in src/util/dom.ts iterates elem.attributes as a live NamedNodeMap while removeAttributes() removes attributes from the same collection, shifting indexes