Malware in mapbox-gl-js

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in mapbox-gl-js (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ada891fdc8acdf8af20afcf9782848cf7cf035176b623fdf8c82a3b046d43005 Any computer that has this package installed or running should be considered...

MAL-2025-5433 Malicious code in mapbox-gl-js (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ada891fdc8acdf8af20afcf9782848cf7cf035176b623fdf8c82a3b046d43005 Any computer that has this package installed or running should be considered...

Malicious code in mapbox-demo-components (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1885 Malicious code in mapbox-demo-components (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-22772

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in stephanemartinw Mapbox for WP Advanced mapbox-for-wp-advanced allows Reflected XSS.This issue affects Mapbox for WP Advanced: from n/a through = 1.0.0...

CVE-2025-22772

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in stephanemartinw Mapbox for WP Advanced mapbox-for-wp-advanced allows Reflected XSS.This issue affects Mapbox for WP Advanced: from n/a through = 1.0.0...

CVE-2025-22772 WordPress Mapbox for WP Advanced Plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Mapbox for WP Advanced allows Reflected XSS. This issue affects Mapbox for WP Advanced: from n/a through 1.0.0...

CVE-2025-22772

CVE-2025-22772 denotes a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin/package Mapbox for WP Advanced (notFound feature). The root cause, per the description, is the Improp er Neutralization of Input During Web Page Generation . It affects the component that handles N...

CVE-2025-22772 WordPress Mapbox for WP Advanced Plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in stephanemartinw Mapbox for WP Advanced mapbox-for-wp-advanced allows Reflected XSS.This issue affects Mapbox for WP Advanced: from n/a through = 1.0.0...

PT-2025-4689 · Mapbox · Mapbox For Wp Advanced

Name of the Vulnerable Software and Affected Versions: Mapbox for WP Advanced versions n/a through 1.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables an attacker to...

CVE-2025-22772: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in stephanemartinw Mapbox for WP Advanced mapbox-for-wp-advanced allows Reflected XSS.This issue affects Mapbox for WP Advanced: from n/a through = 1.0.0...

WordPress plugin Mapbox for WP Advanced – Cross-site Script Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Malicious code in mapbox-maps-android (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6283105b5c07939844bd2730cc42bf4c6e8d9bbaf713a147707078aa4e14a4d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in mapbox-maps-android

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-7973 Malicious code in mapbox-maps-android (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6283105b5c07939844bd2730cc42bf4c6e8d9bbaf713a147707078aa4e14a4d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mapbox-demo-gl-style-spec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa5a509685be972fc15ceb454b2c3768fd8dd7c5162f11471642ab34e1f34fb9 The OpenSSF Package Analysis project identified 'mapbox-demo-gl-style-spec' @ 14.4.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-1539 Malicious code in mapbox-demo-gl-style-spec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa5a509685be972fc15ceb454b2c3768fd8dd7c5162f11471642ab34e1f34fb9 The OpenSSF Package Analysis project identified 'mapbox-demo-gl-style-spec' @ 14.4.0 npm as malicious. It is considered malicious because: - The...

FetLife: fetlife.com/signup_step_profile expose access_token of mapbox.com

Vulnerability description not provided...

Mapbox buffer overflow vulnerability

Mapbox is a location data platform for mobile and Web applications from Mapbox, Inc. A buffer overflow vulnerability exists in versions prior to Mapbox gl-native 10.6.1, which stems from excessive image height and width values when creating new images, and can be exploited to cause Mapbox process...