maplibre-gl vulnerabilities

CVEs whose affected-version data names the maplibre-gl package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-85061Critical· 10.0

3w ago

MapLibre GL JS is an interactive vector tile map library for web browsers

MapLibre GL JS is an interactive vector tile map library for web browsers. Prior to 6.4.1, DOM.sanitize() in src/util/dom.ts iterates elem.attributes as a live NamedNodeMap while removeAttributes() removes attributes from the same collec…

▾ Midnightmaplibre-gl · maplibre-glEPSS 0.52%via NVD