MapLibre Vulnerability Exposes 2.7M Users to Zero-Click Attacks