@braintree/sanitize-url (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package @braintree/sanitize-url, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2022-48345 — CVSS 6.1 (medium): sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities.
• CVE-2021-23648 — CVSS 5.4 (medium): The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper sanitization in sanitizeUrl…