GHSA-mrr8-v49w-3333
sweetalert2 contains potentially undesirable behavior
sweetalert2 versions from 11.6.14 to before 11.22.4 have potentially undesirable behavior. The package outputs audio and/or video messages that do not pertain to the functionality of the package when run on specific tlds. This functionality is documented on the project's readme.
What each source reports
GitHub Advisories No score
sweetalert2 contains potentially undesirable behavior
sweetalert2 versions from 11.6.14 to before 11.22.4 have potentially undesirable behavior. The package outputs audio and/or video messages that do not pertain to the functionality of the package when run on specific tlds. This functionality is documented on the project's readme.
- Record
GHSA-mrr8-v49w-3333- Weakness
- CWE-440
- Updated
- 2026-11-02
OSV No score
sweetalert2 contains potentially undesirable behavior
sweetalert2 versions from 11.6.14 to before 11.22.4 have potentially undesirable behavior. The package outputs audio and/or video messages that do not pertain to the functionality of the package when run on specific tlds. This functionality is documented on the project's readme.
- Record
GHSA-mrr8-v49w-3333- Weakness
- CWE-440
- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sweetalert2npm |
11.6.14 up to 11.22.4 | 11.22.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-mrr8-v49w-3333 is a vulnerability with no CVSS score yet in sweetalert2, published July 10, 2023. No source lists public exploit code. Fixed in sweetalert2 11.22.4.
References
github.com/sweetalert2/sweetalert2/releases/tag/v11.4.9
npmjs.com/package/sweetalert2