Package
wazuh-dashboard-dashboards-maps-fips
Component
maplibre-gl
Latest update
10.0
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
The maps plugin is built from dashboards-maps 2.19.5.0, which pins maplibre-gl ^2.4.0; the first patched release is maplibre-gl 6.4.1, four major versions ahead. maplibre-gl 6 is an ESM-only, WebGL2-only distribution that drops the UMD bundles and changes the Map, event and GeoJSON source APIs, so forcing 6.4.1 into the 2.19 plugin without matching plugin code changes is not a safe change. Upstream dashboards-maps has not adopted 6.4.1 on any branch: main is still on 5.2.0 and the open upstream bump to 6.4.1 (opensearch-project/dashboards-maps pull 865) fails upstream unit and integration tests. Remediation depends on upstream dashboards-maps releasing a version built against maplibre-gl 6.4.1 or later.
Status