-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
JavaScriptJavaScript| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| sweetalert2 | npm | >= 8.19.1, < 9.0.0 |
Miggo AIRoot Cause AnalysisThe vulnerability involves protestware behavior added in v8.19.1, which injects audio/video messages for specific TLDs. While the exact function name/path isn't explicitly provided in the sources, the commit message 'add STOP WAR message for Russians' (from the linked v11.4.9 release) and npm page description strongly imply a function exists to detect domains and trigger these messages. Confidence is medium because the advisory lacks direct code references, but the protestware behavior is explicitly documented as introduced in the affected versions.
Ongoing coverage of React2Shell