Mapbox

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Mapbox records in CISA KEV

No Mapbox vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mapbox.js 1 record LOW Maps Software Development Kit 1 record LOW Npm-test-sqlite3-trunk 1 record LOW

Records

3 records

TI-2016-08736 CVE-2016-10695 · GHSA-mf7c-58q5-7v65

Cryptographic flaw in HackerOne npm-test-sqlite3-trunk node module

LOW 39

The npm-test-sqlite3-trunk module provides asynchronous, non-blocking SQLite3 bindings.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01725 Published 2018-06-04 No fix listed CWE-311

TI-2022-17905 CVE-2022-38216 · GHSA-4696-g7jj-xg2h

Integer overflow in Mapbox

LOW 34

An integer overflow exists in Mapbox's closed source gl-native library prior to version 10.6.1, which is bundled with multiple Mapbox products including open source libraries.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00877 Published 2022-08-16 Fixed in 10.6.1 CWE-190

TI-2017-14386 CVE-2017-1000043 · GHSA-q69p-5h74-w36f

Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a…

LOW 29

Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON name and map share control

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00935 Published 2017-07-13 Fixed in 1.6.6, 2.2.4 CWE-79

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0