Search for packages
| purl | pkg:npm/bootstrap@3.4.1 |
| Next non-vulnerable version | 4.0.0-beta.2 |
| Latest non-vulnerable version | 5.0.0 |
| Risk score | 2.9 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-vxmc-5x29-h64v
Aliases: CVE-2024-6485 |
Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributes A security vulnerability has been discovered in bootstrap that could enable Cross-Site … | There are no reported fixed by versions. |
|
GHSA-9mvj-f7w8-pvh2
Aliases: CVE-2024-6484 |
Withdrawn Advisory: Bootstrap Cross-Site Scripting (XSS) vulnerability ## Withdrawn Advisory This advisory has been withdrawn because it was determined to … | There are no reported fixed by versions. |
|
GHSA-q58r-hwc8-rm9j
Aliases: CVE-2025-1647 |
Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip Components Improper Neutralization of Input During Web Page Generation (XSS … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-9v3m-8fp8-mj99
|
Bootstrap Vulnerable to Cross-Site Scripting Versions of `bootstrap` prior to 3.4.1 for 3.x and 4.3.1 for 4.x are vulnerable to … |
CVE-2019-8331
|