151 matches found
CVE-2026-90711 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, tileserver-gl, sqlpad, langfuse, thingsboard, jupyter-base-notebook...
GHSA-JQCG-44MW-7W3H vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, tileserver-gl, sqlpad, langfuse, thingsboard, jupyter-base-notebook...
TileServer GL <=3.0.0 - Cross-Site Scripting
TileServer GL through 3.0.0 is vulnerable to reflected cross-site scripting via server.js because the content of the key GET parameter is reflected unsanitized in an HTTP response for the application's main page. id: CVE-2020-15500 info: name: TileServer GL =3.0.0 - Cross-Site Scripting author:...
TileServer API - Cross Site Scripting
tileserver-gl up to v4.4.10 was discovered to contain a cross-site scripting XSS vulnerability via the component /data/v3/?key. id: CVE-2024-35627 info: name: TileServer API - Cross Site Scripting author: DhiyaneshDK severity: medium description: | tileserver-gl up to v4.4.10 was discovered to...
MapTiler Tileserver-php v2.0 - Unauthenticated File Read
MapTiler Tileserver-php v2.0 contains a directory traversal caused by improper sanitization of GET parameters in renderTile function, letting attackers read arbitrary files on the server, exploit requires crafted web requests id: CVE-2025-44137 info: name: MapTiler Tileserver-php v2.0 -...
MapTiler Tileserver-php v2.0 - Unauthenticated XSS
MapTiler Tileserver-php v2.0 contains a reflected XSS caused by unencoded reflection of the GET parameter "layer" in an error message, letting unauthenticated attackers execute arbitrary script on victim browsers. id: CVE-2025-44136 info: name: MapTiler Tileserver-php v2.0 - Unauthenticated XSS...
CVE-2025-44136
CVE-2025-44136 XSS non authentifié dans MapTiler Tileserver-php v2.0. Description MapTiler Tileserver-php v2.0 est vulnérable aux Cross Site Scripting XSS. Le paramètre GET « layer » est reflété dans un message d'erreur sans encodage HTML. Cela conduit à une XSS et permet à un attaquant non...
CVE-2025-44137
CVE-2025-44137 Lecture de fichier non authentifiée dans MapTiler Tileserver-php v2.0. Description MapTiler Tileserver-php v2.0 est vulnérable à une traversée de répertoire. La fonction renderTile dans tileserver.php est chargée de délivrer les tuiles stockées sous forme de fichiers sur le serveur...
GHSA-RGJ7-G3M4-5G8C vulnerabilities
Vulnerabilities for packages: tileserver-gl...
GHSA-PX8P-9VWX-VF98 vulnerabilities
Vulnerabilities for packages: tileserver-gl, langfuse...
CVE-2026-45820 vulnerabilities
Vulnerabilities for packages: tileserver-gl, langfuse...
GHSA-P498-V437-472G vulnerabilities
Vulnerabilities for packages: vitess, tileserver-gl, langfuse...
GHSA-PX8P-9VWX-VF98 vulnerabilities
Vulnerabilities for packages: tileserver-gl-fips, langfuse-fips, tileserver-gl, lambda-nodejs, langfuse, librechat...
CVE-2026-45820 vulnerabilities
Vulnerabilities for packages: tileserver-gl-fips, langfuse-fips, tileserver-gl, lambda-nodejs, langfuse, librechat...
CVE-2026-73569 vulnerabilities
Vulnerabilities for packages: tileserver-gl-fips, jitsucom-jitsu, langfuse-fips, thingsboard-fips, tileserver-gl, langfuse, kibana...
CVE-2026-73569 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, tileserver-gl...
CVE-2026-5078 vulnerabilities
Vulnerabilities for packages: tileserver-gl-fips, wazuh-dashboard, wazuh-dashboard-fips, tileserver-gl, azurite...
GHSA-4VJ7-5MJ6-JM8M vulnerabilities
Vulnerabilities for packages: tileserver-gl-fips, wazuh-dashboard, wazuh-dashboard-fips, tileserver-gl, azurite...