Description
Versions of bootstrap-vue prior to 2.0.0-rc.12 are vulnerable to Cross-Site Scripting. Due to insufficient input sanitization, components may be vulnerable to Cross-Site Scripting through the options variable. This may lead to the execution of malicious JavaScript on the user’s browser.
Recommendation
Update the bootstrap-vue package to the latest compatible version. Followings are version details:
- Affected version(s): <= 2.0.0-rc.11
- Patched version(s): 2.0.0-rc.12
References
Related Issues
- Cross-Site Scripting in bootstrap-select - bootstrap-select - Vulnerability
- vue-i18n has cross-site scripting vulnerability with prototype pollution - CVE-2024-52809
- vue-i18n has cross-site scripting vulnerability with prototype pollution - vue-i18n - CVE-2024-52809
- Bootstrap Cross-site Scripting vulnerability - bootstrap - GHSA-pj7m-g53m-7638 - CVE-2018-14041
You might also like:
- Tags:
- npm
- bootstrap-vue
Anything's wrong? Let us know Last updated on April 03, 2023