Cross-site Scripting (XSS)

Overview maplibre-gl is a BSD licensed community fork of mapbox-gl, a WebGL interactive maps library Affected versions of this package are vulnerable to Cross-site Scripting XSS via the DOM.removeAttributes function, which iterates over a live NamedNodeMap while simultaneously calling...