GHSA-8CJ5-5RVV-WF4V vulnerabilities

Vulnerabilities for packages: sqlpad, kibana, gitlab-rails-ce, tileserver-gl-fips, tileserver-gl, gitlab-rails-ce-fips, jitsucom-jitsu, code-server...

GHSA-8CJ5-5RVV-WF4V vulnerabilities

Vulnerabilities for packages: sqlpad, jitsucom-jitsu, code-server, tileserver-gl...

CVE-2025-48387 vulnerabilities

Vulnerabilities for packages: sqlpad, jitsucom-jitsu, code-server, tileserver-gl...

CVE-2020-15500

An issue was discovered in server.js in TileServer GL through 3.0.0. The content of the key GET parameter is reflected unsanitized in an HTTP response for the application's main page, causing reflected XSS...

GHSA-75V8-2H7P-7M2M vulnerabilities

Vulnerabilities for packages: tileserver-gl...

CVE-2025-46653 vulnerabilities

Vulnerabilities for packages: tileserver-gl...

CVE-2025-46653 vulnerabilities

Vulnerabilities for packages: tileserver-gl, tileserver-gl-fips...

GHSA-75V8-2H7P-7M2M vulnerabilities

Vulnerabilities for packages: tileserver-gl, tileserver-gl-fips...

CVE-2024-12905 vulnerabilities

Vulnerabilities for packages: sqlpad, code-server, tileserver-gl...

GHSA-PQ67-2WWV-3XJX vulnerabilities

Vulnerabilities for packages: sqlpad, code-server, tileserver-gl...

CVE-2024-12905 vulnerabilities

Vulnerabilities for packages: sqlpad, kibana, tileserver-gl-fips, tileserver-gl, code-server...

GHSA-PQ67-2WWV-3XJX vulnerabilities

Vulnerabilities for packages: sqlpad, kibana, tileserver-gl-fips, tileserver-gl, code-server...

CVE-2024-35627

tileserver-gl up to v4.4.10 was discovered to contain a cross-site scripting XSS vulnerability via the component /data/v3/?key...

GHSA-RHX6-C78J-4Q9W vulnerabilities

Vulnerabilities for packages: sqlpad, kubeflow-centraldashboard, tileserver-gl-fips, arangodb, tileserver-gl, argo-workflows, grafana-image-renderer, kubeflow-pipelines, thingsboard...

CVE-2024-21538 vulnerabilities

Vulnerabilities for packages: lerna, node-gyp, graalvm, renovate, sqlpad, kibana, opensearch-dashboards-fips, tileserver-gl-fips, arangodb, kubeflow-katib, eslint, argo-workflows, pgadmin4, py3-captum, opensearch-dashboards, airflow, tileserver-gl, ts-patch...

CVE-2024-10503

A vulnerability was found in Klokan MapTiler tileserver-gl 2.3.1 and classified as problematic. This issue affects some unknown processing of the component URL Handler. The manipulation of the argument key leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2024-10503 Klokan MapTiler tileserver-gl URL cross site scripting

A vulnerability was found in Klokan MapTiler tileserver-gl 2.3.1 and classified as problematic. This issue affects some unknown processing of the component URL Handler. The manipulation of the argument key leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2024-10503

CVE-2024-10503 affects Klokan MapTiler tileserver-gl 2.3.1. The vulnerability is in the URL Handler component where manipulation of the key parameter enables cross-site scripting. Exploitation is possible remotely; disclosures exist but details on a fixed version are not provided in the documents...

CVE-2024-10503 Klokan MapTiler tileserver-gl URL cross site scripting

A vulnerability was found in Klokan MapTiler tileserver-gl 2.3.1 and classified as problematic. This issue affects some unknown processing of the component URL Handler. The manipulation of the argument key leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

TileServer GL 跨站脚本漏洞

TileServer GL is an open source map server for vector blocks from the Maptiler team. A cross-site scripting vulnerability exists in TileServer GL version 2.3.1, which stems from a parameter key of the component URL Handler can lead to cross-site scripting attacks...