Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-c7pp-x73h-4m2v

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-c7pp-x73h-4m2v

Cross-Site Scripting in bootstrap-vue Versions of `bootstrap-vue` prior to 2.0.0-rc.12 are vulnerable to Cross-Site Scripting. Due to insufficient input sanitization, components may be vulnerable to Cross-Site Scripting through the `options` variable. This may lead to the execution of malicious JavaScript on the user's browser. ## Recommendation Upgrade to version 2.0.0-rc.12 or later.

gitlab/npm/bootstrap-vue/GMS-2020-126

Cross-Site Scripting in bootstrap-vue Versions of `bootstrap-vue` are vulnerable to Cross-Site Scripting. Due to insufficient input sanitization, components may be vulnerable to Cross-Site Scripting through the `options` variable. This may lead to the execution of malicious JavaScript on the user's browser.