{"vulnerability": "CVE-2026-85061", "sightings": [{"uuid": "f4936d93-0865-444c-b9e4-ca6ac54f42ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85061", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mundrvolze2g", "content": "CVE-2026-85061 - maplibre-gl-js\nThe interactive map library MapLibre GL JS (versions before 6.4.1) can fail to remove dangerous HTML attributes when processing custom attribution text. An attacker who supplies\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#maplibre #CVE #infosec", "creation_timestamp": "2026-09-03T21:00:07.398565Z"}, {"uuid": "30273488-dcbd-4c20-abb9-8df8cebde01e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85061", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3munhm3g2gz2g", "content": "\ud83d\udea8 CVE-2026-85061 \u2014 CVSS 10 CRITICAL\n\nMapLibre GL JS is an interactive vector tile map library for web browsers. Prior to 6.4.1, DOM.sanitize() i...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-85061\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-03T22:08:51.359589Z"}, {"uuid": "333f7ef1-d487-40e1-a793-595688f0e257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85061", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3muogt2znwk2y", "content": "\u3010\u7dca\u6025\u3011MapLibre GL JS \u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff08CVE-2026-85061 / CVSS 10.0\uff09\n\n\u7121\u5bb3\u5316\u3057\u3066\u3044\u308b\u306f\u305a\u306e\u30b5\u30cb\u30bf\u30a4\u30ba\u51e6\u7406\u304c\u3001\u96a3\u308a\u5408\u3046\u5371\u967a\u306a\u5c5e\u6027\u30921\u3064\u98db\u3070\u3057\u3066\u901a\u3057\u3066\u3057\u307e\u3044\u307e\u3059\u3002\u5730\u56f3\u306e\u5e30\u5c5e\u8868\u793a\u3092\u63cf\u753b\u3057\u305f\u6642\u70b9\u3067\u30b9\u30af\u30ea\u30d7\u30c8\u304c\u52d5\u304d\u3001\u30af\u30ea\u30c3\u30af\u306a\u3069\u306e\u8ffd\u52a0\u64cd\u4f5c\u306f\u8981\u308a\u307e\u305b\u3093\u3002\n\n\u5bfe\u51e6: npm \u306e maplibre-gl \u3092 6.4.1 \u4ee5\u964d\u3078\u66f4\u65b0\u3057\u3066\u304f\u3060\u3055\u3044\uff08\u6700\u65b0\u306f 6.7.0\uff09\u3002\n\nforsmile.jp/articles/map...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "creation_timestamp": "2026-09-04T07:27:07.206178Z"}, {"uuid": "a70e8fc9-a79e-43c9-9744-fcada13cb2f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85061", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mv2icuikav2l", "content": "A critical MapLibre XSS vulnerability allows zero-click code execution in 2.7M weekly downloads. Discover how CVE-2026-85061 works and how to patch now.\n\n#MapLibre #XSS #CVE202685061 #WebSecurity #InfoSec #CyberSecurity #OpenSource", "creation_timestamp": "2026-09-09T02:25:48.347084Z"}]}