GMS-2015-37: Content Injection via TileJSON attribute

October 24, 2015

Mapbox.js is vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios.

References

hackerone.com/reports/54327

Code Behaviors & Features

Detect and mitigate GMS-2015-37 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →