5.4
Medium
CVE-2021-23648 The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper…
Description
The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper sanitization in sanitizeUrl function.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| @braintree/sanitize-url 6.0 | earliest → < 6.0.0 | 6.0.0 |