Moderate severity vulnerability that affects mapbox.js

2018-11-09T17:48:34
ID GHSA-Q69P-5H74-W36F
Type github
Reporter GitHub Advisory Database
Modified 2019-07-03T21:02:05

Description

Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON name and map share control