2023-02-24 00:00:00
mitre
PUBLISHED
sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities.