Search for packages
| purl | pkg:deb/debian/twitter-bootstrap3@3.4.0%2Bdfsg-1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-br4c-7x9j-g3f6 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Bootstrap, XSS is possible in the tooltip data-viewport attribute. |
CVE-2018-20676
GHSA-3mgp-fx93-9xv5 |
| VCID-eh2s-9hss-yken | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Bootstrap, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041. |
CVE-2016-10735
GHSA-4p24-vmcr-4gqj |
| VCID-hbwg-ebvx-k7e1 | Cross-site Scripting In Bootstrap, XSS is possible in the collapse data-parent attribute. |
CVE-2018-14040
GHSA-3wqf-4x89-9g79 |
| VCID-hqne-7h6h-3ff8 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Bootstrap, XSS is possible in the affix configuration target property. |
CVE-2018-20677
GHSA-ph58-4vrj-w6hr |
| VCID-vfsr-kypp-wbea | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Bootstrap, XSS is possible in the data-container property of tooltip. |
CVE-2018-14042
GHSA-7mvr-5x2g-wfc8 |