Search for packages
| purl | pkg:maven/org.webjars/bootstrap@1.3.0 |
| Next non-vulnerable version | 4.0.0-alpha |
| Latest non-vulnerable version | 5.0.0 |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-f43n-fgru-vqee
Aliases: CVE-2018-20677 GHSA-ph58-4vrj-w6hr |
bootstrap Cross-site Scripting vulnerability In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property. |
Affected by 2 other vulnerabilities. |
|
VCID-gmca-n7as-2yap
Aliases: CVE-2018-20676 GHSA-3mgp-fx93-9xv5 |
XSS vulnerability that affects bootstrap In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute. |
Affected by 2 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-07-03T17:31:17.369552+00:00 | GitLab Importer | Affected by | VCID-gmca-n7as-2yap | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.webjars/bootstrap/CVE-2018-20676.yml | 37.0.0 |
| 2025-07-03T17:31:14.993165+00:00 | GitLab Importer | Affected by | VCID-f43n-fgru-vqee | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.webjars/bootstrap/CVE-2018-20677.yml | 37.0.0 |