Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2018-14042 — MEDIUM severity vulnerability | Release Alert

CVE-2018-14042

4.3

MEDIUMCVSS v2

Published

July 13, 2018

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.

@lerna/bootstrap

NPMLink local packages together and install remaining package dependencies

>= 4.0.0, < 4.1.2, = 4.0.0, < 3.4.0NVD

NPMThe most popular front-end framework for developing responsive, mobile first projects on the web.

>= 4.0.0, < 4.1.2, = 4.0.0, < 3.4.0NVD

@types/bootstrap

More on this CVE

NVD↗GitHub Advisory↗

NPM

TypeScript definitions for bootstrap

>= 4.0.0, < 4.1.2, = 4.0.0, < 3.4.0NVD

GitHubThe most popular HTML, CSS, and JavaScript framework for developing responsive, mobile first projects on the web.

>= 4.0.0, < 4.1.2, = 4.0.0, < 3.4.0NVD

RubyGemsThe most popular HTML, CSS, and JavaScript framework for developing responsive, mobile first projects on the web. http://getbootstrap.com

>= 4.0.0, < 4.1.2, = 4.0.0, < 3.4.0NVD

NuGet GalleryThe most popular front-end framework for developing responsive, mobile first projects on the web.

>= 4.0.0, < 4.1.2, = 4.0.0, < 3.4.0NVD