50 matches found
Malicious code in braintree-rpc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 317e40dddb16cb1cb057d35c6fecd763482fcff6009f8fb06386f4b526cb3b10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1614 Malicious code in braintree-rpc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 317e40dddb16cb1cb057d35c6fecd763482fcff6009f8fb06386f4b526cb3b10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1615 Malicious code in braintree-utilities (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ba47f404b8012a3baa206a37fd59066ff35442cb95da8ba7bd1b44a6b9a7968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in braintree-utilities (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ba47f404b8012a3baa206a37fd59066ff35442cb95da8ba7bd1b44a6b9a7968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE CVE-2021-23648
The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting XSS due to improper sanitization in sanitizeUrl function...
Cross-site Scripting (XSS)
@braintree/sanitize-url is vulnerable to Cross-site Scripting XSS. The vulnerability exists because the decodeHtmlCharacters function in index.ts does not properly sanitize html encoded colons in the urlSchemeRegex parameter, which allows an attacker to inject and execute malicious JavaScript by...
@braintree/sanitize-url Cross-site Scripting vulnerability
sanitize-url aka @braintree/sanitize-url before 6.0.1 allows XSS via HTML entities...
@apa512/stream-chat-react (>=0.0.0-development, <=0.0.5), @brail/web (>=0.2.0-alpha.10, <=0.3.1-canary.1) +38 more potentially affected by CVE-2022-48345 via @braintree/sanitize-url (6.0.0)
@braintree/sanitize-url NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @braintree/sanitize-url and may be impacted: - @apa512/stream-chat-react =0.0.0-development, =0.2.0-alpha.10, =1.0.0, =0.3.0, =8.4.7, =0.1.10, =8.4.7, =8.4.7,...
GHSA-Q8GG-VJ6M-HGMJ @braintree/sanitize-url Cross-site Scripting vulnerability
sanitize-url aka @braintree/sanitize-url before 6.0.1 allows XSS via HTML entities...
CVE-2022-48345
sanitize-url aka @braintree/sanitize-url before 6.0.2 allows XSS via HTML entities...
Braintree sanitize-url 跨站脚本漏洞
Braintree sanitize-url is an open source URL cleanup from Braintree USA. A security vulnerability exists in Braintree sanitize-url prior to version 6.0.2, which stems from allowing XSS attacks via HTML entities...
Simple Membership < 4.2.2 - Contributor+ Stored XSS
The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin. 1. Exploit...
MAL-2022-7095 Malicious code in webhint-configuration-braintree-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22de39e503c59d52d81baba1817d1b14b78230ed7cb08488889d1cac73f1a1d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in webhint-configuration-braintree-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22de39e503c59d52d81baba1817d1b14b78230ed7cb08488889d1cac73f1a1d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Braintree sanitize-url cross-site scripting vulnerability
Braintree sanitize-url is an open source URL cleanup from Braintree, Inc. A cross-site scripting vulnerability exists in versions prior to Braintree sanitize-url 6.0.0, which stems from a lack of user-supplied data and output data validation filtering in the sanitizeUrl function. An attacker coul...
Cross-site Scripting (XSS)
@braintree/sanitize-url is vulnerable to cross-site scripting. The vulnerability exists due to a lack of validating HTML encoding...
Cross-site Scripting in sanitize-url
The package @braintree/sanitize-url before 6.0.0 is vulnerable to Cross-site Scripting XSS due to improper sanitization in the sanitizeUrl function...
GHSA-HQQ7-2Q2V-82XQ Cross-site Scripting in sanitize-url
The package @braintree/sanitize-url before 6.0.0 is vulnerable to Cross-site Scripting XSS due to improper sanitization in the sanitizeUrl function...