Login Request a demo
BR
Product
Braintree/sanitize-url
by Paypal · last CVE Feb 24, 2023
2
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 0Medium 2Low 0
Severity
All severities2Critical0High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Braintree/sanitize-url to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-48345
6.1
1%
Feb 24
sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities
Affected: before 6.0.2
CVE-2021-23648
6.1
1%
Mar 16
The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper sanitization in sanitizeUrl function
Affected: before 6.0.0
Showing 2