Description
Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON name and map share control
Remediation
References
https://hackerone.com/reports/99245
https://nodesecurity.io/advisories/74
Related Vulnerabilities
CVE-2022-25857 Vulnerability in maven package org.yaml:snakeyaml
CVE-2020-24855 Vulnerability in npm package @easy-team/easywebpack-cli
CVE-2023-49800 Vulnerability in npm package nuxt-api-party
CVE-2021-23346 Vulnerability in npm package html-parse-stringify
CVE-2020-14967 Vulnerability in maven package org.webjars.bower:jsrsasign