← All advisories

Medium severity6.1NVD Advisory· Published Feb 24, 2023· Updated Jun 17, 2026

CVE-2022-48345

CVE-2022-48345

Description

sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
@braintree/sanitize-urlnpm	< 6.0.1	6.0.1

Affected products

3

Paypal/Braintree\/sanitize URL
cpe:2.3:a:paypal:braintree\/sanitize-url:*:*:*:*:*:node.js:*:*
Range: <6.0.2
@braintree/sanitize-url/sanitize-urldescription
ghsa-coords
pkg:npm/%40braintree/sanitize-url
Range: < 6.0.1

Patches

Vulnerability mechanics

References

5

github.com/braintree/sanitize-url/commit/d4bdc89f1743fe3cdb7c3f24b06e4c875f349b0cnvdPatchWEB
github.com/braintree/sanitize-url/compare/v6.0.1...v6.0.2nvdPatchRelease NotesWEB
github.com/advisories/GHSA-q8gg-vj6m-hgmjghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-48345ghsaADVISORY
github.com/braintree/sanitize-url/compare/v6.0.0...v6.0.1ghsaWEB

News mentions

0

No linked articles in our index yet.