GHSA-ph58-4vrj-w6hr moderate
bootstrap Cross-site Scripting vulnerability
Affected range
SEMVER: introduced 0; fixed 3.4.0Fixed versions: 3.4.0
bootstrap-sass
bootstrap-sass is a Sass-powered version of Bootstrap 3, ready to drop right into your Sass powered applications.
npm latest 3.4.3 MIT
Evidence path
Version, exploitation, severity
RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.
1
Latest version
3.4.3
No matching published advisory returned
2
Known exploitation
No KEV match
Checked by exact CVE identifier
3
Highest advisory severity
Moderate
5 active advisories
Check an exact version
The registry confirms the version, then OSV checks advisories for that exact value.
Published records
Advisories
GHSA-9v3m-8fp8-mj99 moderate
Bootstrap Vulnerable to Cross-Site Scripting
Affected range
SEMVER: introduced 3.0.0; fixed 3.4.1Fixed versions: 3.4.1
GHSA-4p24-vmcr-4gqj moderate
Bootstrap Cross-site Scripting vulnerability
Affected range
SEMVER: introduced 2.0.4; fixed 3.4.0Fixed versions: 3.4.0
GHSA-3mgp-fx93-9xv5 moderate
XSS vulnerability that affects bootstrap
Affected range
SEMVER: introduced 0; fixed 3.4.0Fixed versions: 3.4.0
GHSA-7mvr-5x2g-wfc8 moderate
Bootstrap Cross-site Scripting vulnerability
Affected range
SEMVER: introduced 2.0.4; fixed 3.4.0Fixed versions: 3.4.0