Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-tzn4-zs4s-wua6

Summary

sweetalert2 contains potentially undesirable behavior
`sweetalert2` versions from 11.6.14 to before 11.22.4 have potentially undesirable behavior. The package outputs audio and/or video messages that do not pertain to the functionality of the package when run on specific tlds. This functionality is documented on the project's readme.

Aliases

alias	GHSA-mrr8-v49w-3333

alias	GMS-2023-1887

Fixed_packages

url	pkg:npm/sweetalert2@11.22.4
purl	pkg:npm/sweetalert2@11.22.4
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:npm/sweetalert2@11.22.4

Affected_packages

url pkg:npm/sweetalert2@11.6.14

purl pkg:npm/sweetalert2@11.6.14

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-tzn4-zs4s-wua6

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/sweetalert2@11.6.14

References

reference_url	https://github.com/sweetalert2/sweetalert2
reference_id
reference_type
scores
url	https://github.com/sweetalert2/sweetalert2

reference_url	https://github.com/sweetalert2/sweetalert2/commit/7de85db5c76ba3ef5f0cdbc335bbc4a7c559e012
reference_id
reference_type
scores
url	https://github.com/sweetalert2/sweetalert2/commit/7de85db5c76ba3ef5f0cdbc335bbc4a7c559e012

reference_url	https://github.com/sweetalert2/sweetalert2#important-notice-about-usage-of-this-software-for-ru-su-by-and-%D1%80%D1%84-domain-zones
reference_id
reference_type
scores
url	https://github.com/sweetalert2/sweetalert2#important-notice-about-usage-of-this-software-for-ru-su-by-and-%D1%80%D1%84-domain-zones

reference_url	https://github.com/sweetalert2/sweetalert2/pull/2847
reference_id
reference_type
scores
url	https://github.com/sweetalert2/sweetalert2/pull/2847

reference_url	https://github.com/sweetalert2/sweetalert2/releases/tag/v11.4.9
reference_id
reference_type
scores
url	https://github.com/sweetalert2/sweetalert2/releases/tag/v11.4.9

reference_url	https://github.com/sweetalert2/sweetalert2/tree/6d02e1095e5d9db1dfa7f0708df6fa13a1b32be3#important-notice-about-usage-of-this-software-for-ru-su-and-%D1%80%D1%84-domain-zones
reference_id
reference_type
scores
url	https://github.com/sweetalert2/sweetalert2/tree/6d02e1095e5d9db1dfa7f0708df6fa13a1b32be3#important-notice-about-usage-of-this-software-for-ru-su-and-%D1%80%D1%84-domain-zones

reference_url	https://www.npmjs.com/package/sweetalert2
reference_id
reference_type
scores
url	https://www.npmjs.com/package/sweetalert2

reference_url	https://github.com/advisories/GHSA-mrr8-v49w-3333
reference_id	GHSA-mrr8-v49w-3333
reference_type
scores
url	https://github.com/advisories/GHSA-mrr8-v49w-3333

Weaknesses

cwe_id	440
name	Expected Behavior Violation
description	A feature, API, or function does not perform according to its specification.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

Exploits

Severity_range_score null

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tzn4-zs4s-wua6

Vulnerability Instance