Search for packages
| purl | pkg:npm/mapbox.js@1.6.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2017-1000042
|
Cross-site Scripting Mapbox is vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via `TileJSON` Name. |
Vulnerable Vulnerable Vulnerable |
|
CVE-2017-1000043
|
Cross-site Scripting Mapbox is vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via `TileJSON` name and map share … |
Not vulnerable Not vulnerable |
|
GMS-2015-37
|
Content Injection via TileJSON attribute Mapbox.js is vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios. |
Vulnerable Vulnerable |
|
GMS-2016-6
|
Content Injection via TileJSON Name Mapbox.js is vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios. |
Not vulnerable Not vulnerable |
|
npm-74
|
Content Injection via TileJSON Name Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a … |
Not vulnerable Not vulnerable |
|
npm-49
|
Content Injection via TileJSON attribute Mapbox.js versions 1.x prior to 1.6.5 and 2.x prior to 2.1.7 are vulnerable to a … |
Vulnerable Vulnerable |
|
GHSA-q69p-5h74-w36f
Aliases: CVE-2017-1000043 |
Content Injection via TileJSON Name in mapbox.js Versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 of `mapbox.js` are … |
Not vulnerable |
|
GHSA-qr28-7j6p-9hmv
Aliases: CVE-2017-1000042 |
Content Injection via TileJSON attribute in mapbox.js Versions 1.x prior to 1.6.5 and 2.x prior to 2.1.7 of `mapbox.js` are … |
Vulnerable Vulnerable |