Vulnerabilities affecting this package (1)
| Vulnerability |
Summary |
Fixed by |
VCID-5s65-4dyk-efe4
Aliases:
CVE-2021-23398
GHSA-2589-w6xf-983r
|
All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting (XSS) via the `dataFormat` parameter. The problem is triggered when an invalid React element is returned, leading to `dangerouslySetInnerHTML` being used, which does not sanitize the output.
|
There are no reported fixed by versions.
|
Vulnerabilities fixed by this package (0)
| Vulnerability |
Summary |
Aliases |
|
This package is not known to fix vulnerabilities.
|