Advisory Weakness Curation

Cross-Site Scripting in bootbox All version of `bootbox` are vulnerable to Cross-Site Scripting. The package does not sanitize user input in the provided dialog boxes, allowing attackers to inject HTML code and execute arbitrary JavaScript. ## Recommendation Sanitize user input being passed to `bootbox` or consider using an alternative package.

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in bootbox.