Paypal Braintree/sanitize-url — known CVE vulnerabilities

Every CVE whose affected-product data names Paypal Braintree/sanitize-url, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2022-48345 — CVSS 6.1 (medium): sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities.
• CVE-2021-23648 — CVSS 5.4 (medium): The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper sanitization in sanitizeUrl…