Description
Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON name and map share control
Remediation
References
https://hackerone.com/reports/99245
https://nodesecurity.io/advisories/74
Related Vulnerabilities
CVE-2023-45282 Vulnerability in npm package openmct
CVE-2017-16113 Vulnerability in maven package org.webjars.npm:parsejson
CVE-2022-31943 Vulnerability in maven package net.mingsoft:ms-mcms
CVE-2020-1912 Vulnerability in npm package hermes-engine
CVE-2022-45397 Vulnerability in maven package org.jenkins-ci.plugins:osf-builder-suite-xml-linter