Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/mapbox.js@2.0.0-beta1
purl pkg:npm/mapbox.js@2.0.0-beta1
Next non-vulnerable version 2.2.4
Latest non-vulnerable version 2.2.4
Risk score
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GMS-2015-37

Content Injection via TileJSON attribute Mapbox.js is vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios.
1.6.5
Vulnerable
2.1.7
Vulnerable
GMS-2016-6

Content Injection via TileJSON Name Mapbox.js is vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios.
1.6.6
Not vulnerable
2.2.4
Not vulnerable
This package is not known to fix any advisories.