LOW
GHSA-mrr8-v49w-3333
sweetalert2 contains potentially undesirable behavior
Quick fix
GHSA-mrr8-v49w-3333 — sweetalert2: upgrade to the fixed version with the command below.
npm install sweetalert2@11.22.4Details
`sweetalert2` versions from 11.6.14 to before 11.22.4 have potentially undesirable behavior. The package outputs audio and/or video messages that do not pertain to the functionality of the package when run on specific tlds. This functionality is documented on the project's readme.
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://github.com/sweetalert2/sweetalert2/pull/2847[WEB]
- https://github.com/sweetalert2/sweetalert2/commit/7de85db5c76ba3ef5f0cdbc335bbc4a7c559e012[WEB]
- https://github.com/sweetalert2/sweetalert2[PACKAGE]
- https://github.com/sweetalert2/sweetalert2/releases/tag/v11.4.9[WEB]
- https://github.com/sweetalert2/sweetalert2/tree/6d02e1095e5d9db1dfa7f0708df6fa13a1b32be3#important-notice-about-usage-of-this-software-for-ru-su-and-%D1%80%D1%84-domain-zones[WEB]
- https://www.npmjs.com/package/sweetalert2[WEB]