mediawiki/maps

Adds various mapping features to MediaWiki

Latest 15.0.1

Packagist

89%

Total Score

healthy

Healthy: 23 releases in the past year and 78 recent commits show active, sustained maintenance.

Are you affected? Scan for Free

Health Score Breakdown

Security policy

No repository security policy was found, which weakens disclosure transparency, although active maintenance and dependency scanning provide some compensation.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. All 16 action references are unpinned, a reproducibility and action-integrity hygiene gap, while the absence of a top-level permissions block is acceptable on its own.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-696794 mediawiki/maps is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.0.1 - 12.1.8, 13.0.0 - 13.1.1 and 14.0.0 - 14.2.0.	0.0.1 - 12.1.813.0.0 - 13.1.114.0.0 - 14.2.0	Medium
AIKIDO-2026-736811 mediawiki/maps is vulnerable to Cross-Site Scripting (XSS) in versions 0.0.1 - 12.1.7, 13.0.0 - 13.1.0 and 14.0.0 - 14.1.0.	0.0.1 - 12.1.713.0.0 - 13.1.014.0.0 - 14.1.0	High
CVE-2026-52854 mediawiki/maps is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 12.1.3.	0.0.0 - 12.1.3	High

Package versions

Maintainers

Jeroen De Dauw

Professional Wiki

Direct Dependencies

Dependency	Last Release	Score
data-values/geo Version ~4.0\|~3.0	—	—
jmikola/geojson Version ^1.0.2	—	—
composer/installers Version ^2.0.0\|^1.0.1	—	—
jeroen/file-fetcher Version ~6.0\|~5.0	—	—
jeroen/simple-cache Version ~2.0	—	—