{"id":"GHSA-mrr8-v49w-3333","aliases":[],"status":"published","title":"sweetalert2 contains potentially undesirable behavior","description":"`sweetalert2` versions from 11.6.14 to before 11.22.4 have potentially undesirable behavior. The package outputs audio and/or video messages that do not pertain to the functionality of the package when run on specific tlds. This functionality is documented on the project's readme.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-440"],"published":"2023-07-10T19:08:10Z","modified":"2025-08-14T19:15:05Z","fixes":[{"ecosystem":"npm","package":"sweetalert2","fixed_in":["11.22.4"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"sweetalert2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.6.14"},{"fixed":"11.22.4"}]}]},{"source":"osv","ecosystem":"npm","package":"sweetalert2","ranges":[{"type":"SEMVER","events":[{"introduced":"11.6.14"},{"fixed":"11.22.4"}]}]}],"references":[{"url":"https://github.com/sweetalert2/sweetalert2/releases/tag/v11.4.9","tags":["web"]},{"url":"https://www.npmjs.com/package/sweetalert2","tags":["web"]},{"url":"https://github.com/sweetalert2/sweetalert2/tree/6d02e1095e5d9db1dfa7f0708df6fa13a1b32be3#important-notice-about-usage-of-this-software-for-ru-su-and-%D1%80%D1%84-domain-zones","tags":["web"]},{"url":"https://github.com/sweetalert2/sweetalert2/pull/2847","tags":["web"]},{"url":"https://github.com/sweetalert2/sweetalert2/commit/7de85db5c76ba3ef5f0cdbc335bbc4a7c559e012","tags":["web"]},{"url":"https://github.com/advisories/GHSA-mrr8-v49w-3333"},{"url":"https://github.com/sweetalert2/sweetalert2","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-mrr8-v49w-3333","title":"sweetalert2 contains potentially undesirable behavior","description":"`sweetalert2` versions from 11.6.14 to before 11.22.4 have potentially undesirable behavior. The package outputs audio and/or video messages that do not pertain to the functionality of the package when run on specific tlds. This functionality is documented on the project's readme.","status":"published","published":"2023-07-10T19:08:10Z","modified":"2025-08-14T19:15:05Z","cwes":["CWE-440"],"updated_at":"2026-11-02T14:38:53.767052Z"}],"osv":[{"id":"GHSA-mrr8-v49w-3333","title":"sweetalert2 contains potentially undesirable behavior","description":"`sweetalert2` versions from 11.6.14 to before 11.22.4 have potentially undesirable behavior. The package outputs audio and/or video messages that do not pertain to the functionality of the package when run on specific tlds. This functionality is documented on the project's readme.","status":"published","published":"2023-07-10T19:08:10Z","modified":"2025-08-14T19:15:04Z","cwes":["CWE-440"],"updated_at":"2026-11-02T15:46:52.170928Z"}]}}