Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-8331
6.1
MEDIUMCVSS v3
Published
February 20, 2019
CVSS v2
4.3 MEDIUM
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
@lerna/bootstrap
NPMLink local packages together and install remaining package dependencies
NPMLink local packages together and install remaining package dependencies< 3.4.1, >= 4.3.0, < 4.3.1NVD
bootstrapNPMThe most popular front-end framework for developing responsive, mobile first projects on the web.
NPMThe most popular front-end framework for developing responsive, mobile first projects on the web.< 3.4.1, >= 4.3.0, < 4.3.1NVD
GitHub
RubyGems
NuGet Gallery