5.4
Moyenne
CVE-2021-23648 The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper…
Description
The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper sanitization in sanitizeUrl function.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| @braintree/sanitize-url 6.0 | premières → < 6.0.0 | 6.0.0 |