CVE-2026-85061 | MapLibre GL JS up to 6.4.0 Sanitization src/util/dom.ts DOM.sanitize cross site scripting

September 3, 2026 Yanac

A vulnerability described as problematic has been identified in MapLibre GL JS up to 6.4.0. The impacted element is the function DOM.sanitize of the file src/util/dom.ts of the component Sanitization. The manipulation results in cross site scripting.

This vulnerability is reported as CVE-2026-85061. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More