Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

WS-2023-0250

Date: August 19, 2025

sweetalert2 versions 11.6.14 and above have potentially undesirable behavior. The package outputs audio and/or video messages that do not pertain to the functionality of the package when run on specific tlds. This functionality is documented on the project's readme

Language: JS

Severity Score

Related Resources (8)

https://www.npmjs.com/package/sweetalert2
https://github.com/advisories/GHSA-mrr8-v49w-3333
https://github.com/sweetalert2/sweetalert2
https://github.com/sweetalert2/sweetalert2/commit/7de85db5c76ba3ef5f0cdbc335bbc4a7c559e012
https://github.com/sweetalert2/sweetalert2/pull/2847
https://github.com/sweetalert2/sweetalert2/releases/tag/v11.4.9
https://github.com/sweetalert2/sweetalert2/tree/6d02e1095e5d9db1dfa7f0708df6fa13a1b32be3#important-notice-about-usage-of-this-software-for-ru-su-and-%D1%80%D1%84-domain-zones
https://www.mend.io/vulnerability-database/WS-2023-0250

Severity Score

Weakness Type (CWE)

Expected Behavior Violation

CWE-440

Use of Potentially Dangerous Function

CWE-676

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): LOW
Availability (A): NONE

Do you need more information?

Contact Us