@braintree/sanitize-url

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.1

CVE-2022-48345

@braintree/sanitize-url Cross-site Scripting vulnerability

sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities.

node-mermaid @braintree/sanitize-url Ubuntu npm

Feb 24, 2023
Medium 5.4

CVE-2021-23648

Cross-site Scripting (XSS)

The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper sanitization in sanitizeUrl function.

node-mermaid node-mermaid @braintree/sanitize-url Debian Ubuntu npm

Mar 16, 2022