There is no fixed version for RHEL:7 compat-exiv2-023 .

org.webjars.npm:mapbox.js@3.3.1 vulnerabilities

3.3.1

4 years ago

4 years ago

Direct Vulnerabilities

Known vulnerabilities in the org.webjars.npm:mapbox.js package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
L Content Injection via TileJSON Name Mapbox.js is vulnerable to script content injection when `L.mapbox.map` and `L.mapbox.shareControl` is used to load untrusted TileJSON content from a non-Mapbox URL.	[0,)
L Content Injection via TileJSON attribute Mapbox.js is vulnerable to script content injection when `L.mapbox.map` or `L.mapbox.tileLayer` is used to load untrusted TileJSON content from a non-Mapbox URL.	[0,)