bootstrap-sass

bootstrap-sass

Releases15

Frequency7 months 1 week

Last Releaseover 4 years ago

bootstrap-sass is a Sass-powered version of Bootstrap 3, ready to drop right into your Sass powered applications.

Log in to subscribe

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2024-6484OSV↗	>= 2.0.0, <= 3.4.1, >= 2.0.0, <= 3.4.3	Jul 11, 2024Thursday, 11 July 2024, 17:15	—	—
Rejected reason: This was not a security issue in Bootstrap. Bootstrap’s JavaScript is not intended to sanitize unsafe or intentionally dangerous HTML. As such, the reported behavior fell outside the scope of Bootstrap’s security model, and the associated CVE has been rescinded.
CVE-2019-8331OSV↗	>= 3.0.0, < 3.4.1, < 4.3.1	Feb 20, 2019Wednesday, 20 February 2019, 16:29	6.1 MEDIUM	4.3 MEDIUM
In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
CVE-2018-20676OSV↗	< 3.4.0	Jan 9, 2019Wednesday, 9 January 2019, 05:29	—	4.3 MEDIUM
In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.
CVE-2018-20677OSV↗	< 3.4.0	Jan 9, 2019Wednesday, 9 January 2019, 05:29	—	4.3 MEDIUM
In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.
CVE-2016-10735OSV↗	>= 2.0.4, < 3.4.0, >= 4.0.0-beta, < 4.0.0-beta.2	Jan 9, 2019Wednesday, 9 January 2019, 05:29	—	4.3 MEDIUM
In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.
CVE-2018-14042OSV↗	>= 2.3.0, < 3.4.0, >= 2.0.4, < 3.4.0, >= 4.0.0, < 4.1.2	Jul 13, 2018Friday, 13 July 2018, 14:29	—	4.3 MEDIUM
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.