{"id":"GHSA-mrr8-v49w-3333","summary":"sweetalert2 contains potentially undesirable behavior","details":"`sweetalert2` versions from 11.6.14 to before 11.22.4 have potentially undesirable behavior. The package outputs audio and/or video messages that do not pertain to the functionality of the package when run on specific tlds. This functionality is documented on the project's readme.","modified":"2025-08-14T19:15:04Z","published":"2023-07-10T19:08:10Z","database_specific":{"cwe_ids":["CWE-440"],"severity":"LOW","github_reviewed":true,"github_reviewed_at":"2023-07-10T19:08:10Z","nvd_published_at":null},"references":[{"type":"WEB","url":"https://github.com/sweetalert2/sweetalert2/pull/2847"},{"type":"WEB","url":"https://github.com/sweetalert2/sweetalert2/commit/7de85db5c76ba3ef5f0cdbc335bbc4a7c559e012"},{"type":"PACKAGE","url":"https://github.com/sweetalert2/sweetalert2"},{"type":"WEB","url":"https://github.com/sweetalert2/sweetalert2/releases/tag/v11.4.9"},{"type":"WEB","url":"https://github.com/sweetalert2/sweetalert2/tree/6d02e1095e5d9db1dfa7f0708df6fa13a1b32be3#important-notice-about-usage-of-this-software-for-ru-su-and-%D1%80%D1%84-domain-zones"},{"type":"WEB","url":"https://www.npmjs.com/package/sweetalert2"}],"affected":[{"package":{"name":"sweetalert2","ecosystem":"npm","purl":"pkg:npm/sweetalert2"},"ranges":[{"type":"SEMVER","events":[{"introduced":"11.6.14"},{"fixed":"11.22.4"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/07/GHSA-mrr8-v49w-3333/GHSA-mrr8-v49w-3333.json"}}],"schema_version":"1.9.0"}