Alexpechkarev Google Maps Through 12.16 Disabled Tls Certificate Verification Via Ssl Verify Peer

Back www.vulncheck.com

Alexpechkarev Google Maps Through 12.16 Disabled Tls Certificate Verification Via Ssl Verify Peer

www.vulncheck.com • October 5, 2026

Share: View original

alexpechkarev/google-maps through 12.16 Disabled TLS Certificate Verification via ssl_verify_peer

google-maps >= 1.0.3, = 1.0.3, <= 12.16

CWE-295 Improper Certificate Validation

Ready to get Started?

Vulnerability Prioritization Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.

Early Warning System Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CVE-2026-105222 Exposes Google Maps API Keys The alexpechkarev/google-maps Laravel package, through version 12.16, disables TLS certificate verification by default, allowing on-path attackers to intercept web-service requests. This vulnerability can expose Google Maps API keys and enable unauthorized API usage, leading to unexpected costs or misleading functionality. Laravel applications using this package are particularly at risk, especially in environments where outbound traffic can be intercepted. The CVE-2026-105222 has a CVSS score of 9.1, marking it as. No proof-of-concept or exploitation in the wild has been confirmed yet, but immediate remediation is advised. Developers are urged to upgrade to a version that enables certificate verification and to review their API key usage. 1 sources 79

Extracted Entities

CWE Weaknesses (1)

CWE-295 - Improper Certificate Validation

Platforms (1)

Vulnerabilities (1)

Improper Certificate Validation