VulnerableCode Package Details - pkg:npm/bootstrap@3.0.0

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:npm/bootstrap@3.0.0

Essentials

purl	pkg:npm/bootstrap@3.0.0
Tags	Ghost

Next non-vulnerable version	4.0.0-beta.2
Latest non-vulnerable version	5.0.0
Risk score	2.8

Vulnerabilities affecting this package (2)

Advisory	Summary	Fixed in package version
GHSA-9v3m-8fp8-mj99 Aliases: CVE-2019-8331	Bootstrap Vulnerable to Cross-Site Scripting Versions of `bootstrap` prior to 3.4.1 for 3.x and 4.3.1 for 4.x are vulnerable to …	3.4.1 Vulnerable
CVE-2016-10735 Aliases: GHSA-4p24-vmcr-4gqj	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS …	3.4.0 Vulnerable 3.4.0 Vulnerable

Advisory

Summary

Fixed in package version

GHSA-9v3m-8fp8-mj99
Aliases:
CVE-2019-8331

Bootstrap Vulnerable to Cross-Site Scripting Versions of `bootstrap` prior to 3.4.1 for 3.x and 4.3.1 for 4.x are vulnerable to …

3.4.1
Vulnerable

CVE-2016-10735
Aliases:
GHSA-4p24-vmcr-4gqj

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS …

3.4.0
Vulnerable

This package is not known to fix any advisories.