Vulnerabilities

TI-2022-17905 CVE-2022-38216 · GHSA-4696-g7jj-xg2h

Integer overflow in Mapbox

LOW 34

An integer overflow exists in Mapbox's closed source gl-native library prior to version 10.6.1, which is bundled with multiple Mapbox products including open source libraries.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00877 Published 2022-08-16 Fixed in 10.6.1 CWE-190

TI-2016-08736 CVE-2016-10695 · GHSA-mf7c-58q5-7v65

Cryptographic flaw in HackerOne npm-test-sqlite3-trunk node module

LOW 39

The npm-test-sqlite3-trunk module provides asynchronous, non-blocking SQLite3 bindings.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01725 Published 2018-06-04 No fix listed CWE-311

TI-2017-14386 CVE-2017-1000043 · GHSA-q69p-5h74-w36f

Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a…

LOW 29

Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON name and map share control

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00935 Published 2017-07-13 Fixed in 1.6.6, 2.2.4 CWE-79

Vulnerabilities

Filters

Integer overflow in Mapbox

Cryptographic flaw in HackerOne npm-test-sqlite3-trunk node module

Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a…