Paypal Braintree\/Sanitize Url vulnerabilities

2 vulnerabilities

Known vulnerabilities in Paypal Braintree\/Sanitize Url, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2021-23648debiannode-mermaid+4
EPSS score
1.43%
The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper sanitization in sanitizeUrl function.6.1CVE-2022-48345debiannode-mermaid+3
EPSS score
0.56%
sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities.