diff --git a/meshview/static/heatmap.html b/meshview/static/heatmap.html
index 9ec27c7..3acd84c 100644
--- a/meshview/static/heatmap.html
+++ b/meshview/static/heatmap.html
@@ -104,7 +104,9 @@ body { background:var(--mesh-page); color:var(--mesh-text); }
 <div id="legend"></div>
 
 <script src="https://unpkg.com/leaflet@1.9.4/dist/leaflet.js"></script>
-<script src="https://unpkg.com/leaflet.heat/dist/leaflet-heat.js"></script>
+<script src="https://unpkg.com/leaflet.heat@0.2.0/dist/leaflet-heat.js"
+        integrity="sha384-mFKkGiGvT5vo1fEyGCD3hshDdKmW3wzXW/x+fWriYJArD0R3gawT6lMvLboM22c0"
+        crossorigin="anonymous"></script>
 <script>
 const map = L.map("map");
 L.tileLayer("https://{s}.tile.openstreetmap.org/{z}/{x}/{y}.png", {
diff --git a/meshview/templates/map-view.html b/meshview/templates/map-view.html
index 9a7f8fb..0ec4951 100644
--- a/meshview/templates/map-view.html
+++ b/meshview/templates/map-view.html
@@ -298,7 +298,9 @@ a.mesh-inspector-packet:hover { background:var(--mesh-soft); }
 <script src="https://unpkg.com/leaflet-polylinedecorator@1.6.0/dist/leaflet.polylinedecorator.js"
         integrity="sha384-FhPn/2P/fJGhQLeNWDn9B/2Gml2bPOrKJwFqJXgR3xOPYxWg5mYQ5XZdhUSugZT0"
         crossorigin></script>
-<script src="https://unpkg.com/leaflet.heat/dist/leaflet-heat.js"></script>
+<script src="https://unpkg.com/leaflet.heat@0.2.0/dist/leaflet-heat.js"
+        integrity="sha384-mFKkGiGvT5vo1fEyGCD3hshDdKmW3wzXW/x+fWriYJArD0R3gawT6lMvLboM22c0"
+        crossorigin="anonymous"></script>
 <script src="/static/portmaps.js"></script>
 
 <script>
diff --git a/meshview/templates/node.html b/meshview/templates/node.html
index b67d44f..d89a815 100644
--- a/meshview/templates/node.html
+++ b/meshview/templates/node.html
@@ -242,7 +242,9 @@
 
 <script src="https://cdn.jsdelivr.net/npm/echarts@5.5.0/dist/echarts.min.js"></script>
 <script src="https://cdnjs.cloudflare.com/ajax/libs/qrcodejs/1.0.0/qrcode.min.js"></script>
-<script src="https://unpkg.com/leaflet.heat/dist/leaflet-heat.js"></script>
+<script src="https://unpkg.com/leaflet.heat@0.2.0/dist/leaflet-heat.js"
+        integrity="sha384-mFKkGiGvT5vo1fEyGCD3hshDdKmW3wzXW/x+fWriYJArD0R3gawT6lMvLboM22c0"
+        crossorigin="anonymous"></script>
 <script src="/static/portmaps.js"></script>
 
 <script>