CVE-2021-23648

Publication date

2022-03-16 15:45:19

Family

snyk

State

PUBLISHED

Description

The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper sanitization in sanitizeUrl function.