{"action":"Upgrade @braintree/sanitize-url to 6.0.0 or later.","affected":[{"fixed":"6.0.0","introduced":"0"}],"component":"@braintree/sanitize-url","cve_ids":["CVE-2021-23648"],"ecosystem":"npm","epss":0.0143,"exploited":false,"fixed_versions":["6.0.0"],"ghsa_id":"GHSA-hqq7-2q2v-82xq","id":"tcs_01M5KFVVVVXC3B4W9JGM1M4VJ6","modified_at":"2026-09-10T03:49:17.446984712Z","published_at":"2022-03-17T00:00:24Z","references":["https://osv.dev/vulnerability/GHSA-hqq7-2q2v-82xq","https://nvd.nist.gov/vuln/detail/CVE-2021-23648","https://github.com/braintree/sanitize-url/pull/40","https://github.com/braintree/sanitize-url/pull/40/commits/e5afda45d9833682b705f73fc2c1265d34832183","https://github.com/braintree/sanitize-url","https://github.com/braintree/sanitize-url/blob/main/src/index.ts%23L11","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2PFW6Q2LXXWTFRTMTRN4ZGADFRQPKJ3D","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/36GUEPA5TPSC57DZTPYPBL6T7UPQ2FRH","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HLAQRRGNSO5MYCPAXGPH2OCSHOGHSQMQ","https://snyk.io/vuln/SNYK-JS-BRAINTREESANITIZEURL-2339882"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-hqq7-2q2v-82xq","url":"https://osv.dev/vulnerability/GHSA-hqq7-2q2v-82xq"}],"summary":"Cross-site Scripting in sanitize-url"}