Skip to content

PatchFirst · Latest vulnerabilities

@braintree/sanitize-url vulnerabilities

Vulnerabilities published for @braintree/sanitize-url in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 2

CVE-2022-48345
Medium · CVSS 6.1EPSS 0.56%Fix available
CVE-2022-48345
sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities.
@braintree/sanitize-url Node.js
- Update to 6.0.1
Published February 24, 2023Updated March 12, 2025
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-23648
Medium · CVSS 5.4EPSS 1.43%Fix available
Cross-site Scripting (XSS)
The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper sanitization in sanitizeUrl function.
@braintree/sanitize-url Node.js
- Update to 6.0.0
Published March 16, 2022Updated September 16, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →