Braintree\/sanitize-url CVEs and Security Vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2022-48345

sanitize-url: XSS via HTML entities

sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Paypal

Products

Braintree\/sanitize-url

CVE-2021-23648

The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper sanitization in sanitizeUrl function.

CVSS 3.1 · 5.4 Medium EPSS 1.4% KEV · Not listed

Vendors

Fedoraproject Paypal Redhat

Products

Fedora Braintree\/sanitize-url Enterprise Linux and 1 more

Page 1 of 1.