CVE-2026-85061 - MapLibre GL JS XSS via DOM.sanitize() live NamedNodeMap attribute removal bypass - Upwind | Cloud & AI Security for the Realtime Era

Security Feed

See the latest insights and analysis from our MDR team.

CVE-2026-85061

By Stav Salman |

9 September 2026

CVE-2026-85061 – MapLibre GL JS XSS via DOM.sanitize() live NamedNodeMap attribute removal bypass

MapLibre GL JS `