Lucene search

K
osvGoogleOSV:GHSA-Q8GG-VJ6M-HGMJ
HistoryFeb 24, 2023 - 6:30 a.m.

@braintree/sanitize-url Cross-site Scripting vulnerability

2023-02-2406:30:16
Google
osv.dev
7

0.001 Low

EPSS

Percentile

29.6%

sanitize-url (aka @braintree/sanitize-url) before 6.0.1 allows XSS via HTML entities.

CPENameOperatorVersion
@braintree/sanitize-urllt6.0.1

0.001 Low

EPSS

Percentile

29.6%