Leafletjs Leaflet
1 CVEs affecting Leafletjs Leaflet. Latest disclosed: 2026-04-14. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-69993 | Medium | 6.1 | 2026-04-14 | Leaflet versions up to and including 1.9.4 are vulnerable to Cross-Site Scripting (XSS) via the bindPopup() method. This method renders user-supplied input as… |