CVE-2021-23648: Fedoraproject Fedora

Medium severity, CVSS 6.1. EPSS: 1.4% chance of exploitation in the next 30 days.

The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper sanitization in sanitizeUrl function.

Affected products

• Fedoraproject Fedora: version 34 only; version 35 only; version 36 only
• PayPal Braintree/sanitize-Url: before 6.0.0 (fixed in 6.0.0)

Published 2022-03-16. Last modified 2026-06-17.