GHSA-vxmc-5x29-h64v moderate
Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributes
Affected range
SEMVER: introduced 1.4.0; last affected 3.4.1bootstrap
The most popular front-end framework for developing responsive, mobile first projects on the web.
npm latest 5.3.8 MIT
Evidence path
Version, exploitation, severity
RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.
1
Latest version
5.3.8
No matching published advisory returned
2
Known exploitation
No KEV match
Checked by exact CVE identifier
3
Highest advisory severity
Moderate
9 active advisories
Check an exact version
The registry confirms the version, then OSV checks advisories for that exact value.
Published records
Advisories
GHSA-q58r-hwc8-rm9j moderate
Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip Components
GHSA-3wqf-4x89-9g79 moderate
Bootstrap vulnerable to Cross-Site Scripting (XSS)
Affected range
SEMVER: introduced 4.0.0; fixed 4.1.2SEMVER: introduced 2.3.0; fixed 3.4.0Fixed versions: 4.1.2, 3.4.0
GHSA-ph58-4vrj-w6hr moderate
bootstrap Cross-site Scripting vulnerability
Affected range
SEMVER: introduced 0; fixed 3.4.0Fixed versions: 3.4.0
GHSA-9v3m-8fp8-mj99 moderate
Bootstrap Vulnerable to Cross-Site Scripting
Affected range
SEMVER: introduced 4.0.0; fixed 4.3.1SEMVER: introduced 3.0.0; fixed 3.4.1Fixed versions: 4.3.1, 3.4.1
GHSA-4p24-vmcr-4gqj moderate
Bootstrap Cross-site Scripting vulnerability
Affected range
SEMVER: introduced 2.0.4; fixed 3.4.0SEMVER: introduced 4.0.0-beta; fixed 4.0.0-beta.2Fixed versions: 3.4.0, 4.0.0-beta.2
GHSA-3mgp-fx93-9xv5 moderate
XSS vulnerability that affects bootstrap
Affected range
SEMVER: introduced 0; fixed 3.4.0Fixed versions: 3.4.0
GHSA-7mvr-5x2g-wfc8 moderate
Bootstrap Cross-site Scripting vulnerability
Affected range
SEMVER: introduced 4.0.0; fixed 4.1.2SEMVER: introduced 2.3.0; fixed 3.4.0Fixed versions: 4.1.2, 3.4.0
GHSA-pj7m-g53m-7638 moderate
Bootstrap Cross-site Scripting vulnerability
Affected range
SEMVER: introduced 4.0.0; fixed 4.1.2Fixed versions: 4.1.2