Search for packages
Package details: pkg:gem/bootstrap-sass@3.4.1
purl pkg:gem/bootstrap-sass@3.4.1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.1
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-d4k9-se4n-4fh9
Aliases:
CVE-2024-6484
GHSA-9mvj-f7w8-pvh2
Bootstrap Cross-Site Scripting (XSS) vulnerability A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting (XSS) attacks. The issue is present in the carousel component, where the `data-slide` and `data-slide-to` attributes can be exploited through the href attribute of an `<a>` tag due to inadequate sanitization. This vulnerability could potentially enable attackers to execute arbitrary JavaScript within the victim's browser. There are no reported fixed by versions.
VCID-e8jt-6jum-n3az
Aliases:
CVE-2018-14040
GHSA-3wqf-4x89-9g79
Bootstrap vulnerable to Cross-Site Scripting (XSS) In Bootstrap starting in version 2.3.0 and prior to 3.4.0, as well as 4.x before 4.1.2, XSS is possible in the collapse data-parent attribute. There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-3ygq-cbu4-23ad Bootstrap Vulnerable to Cross-Site Scripting Versions of `bootstrap` prior to 3.4.1 for 3.x and 4.3.1 for 4.x are vulnerable to Cross-Site Scripting (XSS). The `data-template` attribute of the tooltip and popover plugins lacks input sanitization and may allow attacker to execute arbitrary JavaScript. ## Recommendation For `bootstrap` 4.x upgrade to 4.3.1 or later. For `bootstrap` 3.x upgrade to 3.4.1 or later. CVE-2019-8331
GHSA-9v3m-8fp8-mj99
GHSA-fxwm-579q-49qq
GHSA-wh77-3x4m-4q9g

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-03T19:09:22.066532+00:00 GitLab Importer Affected by VCID-d4k9-se4n-4fh9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/bootstrap-sass/CVE-2024-6484.yml 37.0.0
2025-07-03T17:32:46.796164+00:00 GitLab Importer Fixing VCID-3ygq-cbu4-23ad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/bootstrap-sass/CVE-2019-8331.yml 37.0.0
2025-07-03T14:33:13.785930+00:00 Ruby Importer Affected by VCID-d4k9-se4n-4fh9 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap-sass/CVE-2024-6484.yml 37.0.0
2025-07-03T14:32:23.571119+00:00 Ruby Importer Affected by VCID-e8jt-6jum-n3az https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap-sass/CVE-2018-14040.yml 37.0.0
2025-07-03T13:57:02.070191+00:00 GitLab Importer Affected by VCID-d4k9-se4n-4fh9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/bootstrap-sass/CVE-2024-6484.yml 36.1.3
2025-07-01T18:11:29.838897+00:00 GitLab Importer Fixing VCID-3ygq-cbu4-23ad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/bootstrap-sass/CVE-2019-8331.yml 36.1.3
2025-07-01T14:35:18.524383+00:00 GHSA Importer Affected by VCID-d4k9-se4n-4fh9 https://github.com/advisories/GHSA-9mvj-f7w8-pvh2 36.1.3
2025-07-01T14:29:40.660441+00:00 GHSA Importer Fixing VCID-3ygq-cbu4-23ad https://github.com/advisories/GHSA-9v3m-8fp8-mj99 36.1.3
2025-07-01T12:21:57.857083+00:00 GithubOSV Importer Fixing VCID-3ygq-cbu4-23ad https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/02/GHSA-9v3m-8fp8-mj99/GHSA-9v3m-8fp8-mj99.json 36.1.3