CVE-2026-121652

Vendor

AWS

Product

maplibre-gl-js-amplify

CVSS v3.1

5.4 AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness

CWE-79

Exposure class

Cloud platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 40
   AWS bulletin AWS 5h ago

   CVE-2026-121652 - Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering

   Bulletin ID: 2026-167-AWS Publication Date: 11/03/2026 10:30 AM PST Description: maplibre-gl-js-amplify is an open-source AWS Amplify library that integrates Amazon Location Service with MapLibre GL JS to render maps, markers…

   CVE-2026-121652 Amazon Web Services
2. 28
   CVE NVD 5h ago

   Cross-site scripting (XSS) issue in AWS Amplify maplibre-gl-js-amplify before 4.0.3 might allow remote authenticated users to inject arbitrary web…

   Cross-site scripting (XSS) issue in AWS Amplify maplibre-gl-js-amplify before 4.0.3 might allow remote authenticated users to inject arbitrary web script or HTML via the (1) title, (2) address, or (3) place_name property in…

   CVSS 5.4 Fix available CVE-2026-121652 AWS