Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-14041
4.3
MEDIUMCVSS v2
Published
July 13, 2018
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.
@lerna/bootstrap
NPMLink local packages together and install remaining package dependencies
NPMLink local packages together and install remaining package dependencies>= 4.0.0, < 4.1.2, = 4.0.0NVD
bootstrapNPMThe most popular front-end framework for developing responsive, mobile first projects on the web.
NPMThe most popular front-end framework for developing responsive, mobile first projects on the web.>= 4.0.0, < 4.1.2, = 4.0.0NVD
GitHub
RubyGems
NuGet Gallery