Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-20676
4.3
MEDIUMCVSS v2
Published
January 9, 2019
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.
@lerna/bootstrap
NPMLink local packages together and install remaining package dependencies
NPMLink local packages together and install remaining package dependencies< 3.4.0NVD
bootstrapNPMThe most popular front-end framework for developing responsive, mobile first projects on the web.
NPMThe most popular front-end framework for developing responsive, mobile first projects on the web.< 3.4.0NVD
GitHub
RubyGems
NuGet Gallery