GHSA-mrr8-v49w-3333: sweetalert2 contains potentially undesirable behavior
(updated )
sweetalert2 versions from 11.6.14 to before 11.22.4 have potentially undesirable behavior. The package outputs audio and/or video messages that do not pertain to the functionality of the package when run on specific tlds. This functionality is documented on the project’s readme.
References
- github.com/advisories/GHSA-mrr8-v49w-3333
- github.com/sweetalert2/sweetalert2
- github.com/sweetalert2/sweetalert2/commit/7de85db5c76ba3ef5f0cdbc335bbc4a7c559e012
- github.com/sweetalert2/sweetalert2/pull/2847
- github.com/sweetalert2/sweetalert2/releases/tag/v11.4.9
- github.com/sweetalert2/sweetalert2/tree/6d02e1095e5d9db1dfa7f0708df6fa13a1b32be3
- www.npmjs.com/package/sweetalert2
Code Behaviors & Features
Detect and mitigate GHSA-mrr8-v49w-3333 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →