maplibre-gl-js-amplify vulnerabilities

CVEs whose affected-version data names the maplibre-gl-js-amplify package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-121652Medium· 5.4

3d ago

Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering

Cross-site scripting (XSS) issue in AWS Amplify maplibre-gl-js-amplify before 4.0.3 might allow remote authenticated users to inject arbitrary web script or HTML via the (1) title, (2) address, or (3) place_name property in GeoJSON featu…

▾ SunlitAWS · maplibre-gl-js-amplifyEPSS 0.26%via CVEORG