Description
Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON name and map share control
Remediation
References
https://hackerone.com/reports/99245
https://nodesecurity.io/advisories/74
Related Vulnerabilities
CVE-2021-21413 Vulnerability in npm package isolated-vm
CVE-2023-42277 Vulnerability in maven package cn.hutool:hutool-core
CVE-2021-21423 Vulnerability in npm package projen
CVE-2023-37960 Vulnerability in maven package io.jenkins.plugins:mathworks-polyspace
CVE-2020-14968 Vulnerability in maven package org.webjars.npm:jsrsasign