GHSA-mrr8-v49w-3333: sweetalert2 contains potentially undesirable behavior
(updated )
sweetalert2 versions from 11.6.14 to before 11.22.4 have potentially undesirable behavior. The package outputs audio and/or video messages that do not pertain to the functionality of the package when run on specific tlds. This functionality is documented on the project’s readme.
References
- github.com/advisories/GHSA-mrr8-v49w-3333
- github.com/sweetalert2/sweetalert2
- github.com/sweetalert2/sweetalert2/commit/7de85db5c76ba3ef5f0cdbc335bbc4a7c559e012
- github.com/sweetalert2/sweetalert2/pull/2847
- github.com/sweetalert2/sweetalert2/releases/tag/v11.4.9
- github.com/sweetalert2/sweetalert2/tree/6d02e1095e5d9db1dfa7f0708df6fa13a1b32be3
- www.npmjs.com/package/sweetalert2
Code Behaviors & Features
Detect and mitigate GHSA-mrr8-v49w-3333 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →