Description (CNA)
sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/braintree/sanitize-url/commit/d4bdc89f1743fe3cdb7c3f24b06e4c875f349b0c
- https://github.com/braintree/sanitize-url/compare/v6.0.1...v6.0.2
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.