Leafletjs

1 CVEs across 1 Leafletjs products. Browse Leafletjs vulnerabilities, severities, and proof-of-concept exploits.

Leafletjs products with known CVEs

ProductCVEs
Leaflet1
Leafletjs CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-69993Medium6.12026-04-14Leaflet versions up to and including 1.9.4 are vulnerable to Cross-Site Scripting (XSS) via the bindPopup() method. This method renders user-supplied input as…