title:     Cross-site scripting (XSS) vulnerability in Paypal-Merchant-SDK-PHP
link:      https://github.com/paypal/merchant-sdk-php/tree/v3.9.1
cve:       CVE-2017-6099
branches:
    2.x:
        time:     2017-03-31, 
        versions: ['<2.1.96']
    master:
        time:     2017-03-31, 
        versions: ['<3.10.0']
reference: composer://paypal/merchant-sdk-php

title:     Cross-site scripting (XSS) vulnerability in Paypal-Merchant-SDK-PHP
link:      https://github.com/paypal/merchant-sdk-php/tree/v3.9.1
cve:       CVE-2017-6099
branches:
    2.x:
        time:     2017-03-31, 
        versions: ['<=2.11.118']
    master:
        time:     2017-03-31, 
        versions: ['<3.10.0']
reference: composer://paypal/merchant-sdk-php

Fix version constraints and version number.
Fix version constraints and version number.