We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
The most popular front-end framework for developing responsive, mobile first projects on the web.
Library home page: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.0.0/js/bootstrap.min.js
Path to dependency file: /blockchain_integration/pi_network/PiFusion/pi_fusion_dashboard/templates/base.html
Path to vulnerable library: /blockchain_integration/pi_network/PiFusion/pi_fusion_dashboard/templates/base.html
Found in HEAD commit: 3f4e44c5da32bed8968f0821ee76f99874840f22
**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation
Dependency Hierarchy:
Found in base branch: main
In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
Publish Date: 2019-02-20
URL: CVE-2019-8331
Base Score Metrics:
Type: Upgrade version
Release Date: 2019-02-20
Fix Resolution: bootstrap - 3.4.1,4.3.1;bootstrap-sass - 3.4.1,4.3.1
Step up your Open Source Security Game with Mend here
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
Publish Date: 2018-07-13
URL: CVE-2018-14042
Origin: https://nvd.nist.gov/vuln/detail/CVE-2018-14042
Release Date: 2018-07-13
Fix Resolution: bootstrap - 3.4.0,4.1.2
In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.
URL: CVE-2018-14041
Fix Resolution: org.webjars.npm:bootstrap:4.1.2.org.webjars:bootstrap:4.1.2
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.
URL: CVE-2018-14040
Fix Resolution: org.webjars.npm:bootstrap:4.1.2,org.webjars:bootstrap:3.4.0
The text was updated successfully, but these errors were encountered:
No branches or pull requests
Vulnerable Library - bootstrap-4.0.0.min.js
The most popular front-end framework for developing responsive, mobile first projects on the web.
Library home page: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.0.0/js/bootstrap.min.js
Path to dependency file: /blockchain_integration/pi_network/PiFusion/pi_fusion_dashboard/templates/base.html
Path to vulnerable library: /blockchain_integration/pi_network/PiFusion/pi_fusion_dashboard/templates/base.html
Found in HEAD commit: 3f4e44c5da32bed8968f0821ee76f99874840f22
Vulnerabilities
**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation
Details
CVE-2019-8331
Vulnerable Library - bootstrap-4.0.0.min.js
The most popular front-end framework for developing responsive, mobile first projects on the web.
Library home page: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.0.0/js/bootstrap.min.js
Path to dependency file: /blockchain_integration/pi_network/PiFusion/pi_fusion_dashboard/templates/base.html
Path to vulnerable library: /blockchain_integration/pi_network/PiFusion/pi_fusion_dashboard/templates/base.html
Dependency Hierarchy:
Found in HEAD commit: 3f4e44c5da32bed8968f0821ee76f99874840f22
Found in base branch: main
Vulnerability Details
In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
Publish Date: 2019-02-20
URL: CVE-2019-8331
CVSS 3 Score Details (6.1)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Release Date: 2019-02-20
Fix Resolution: bootstrap - 3.4.1,4.3.1;bootstrap-sass - 3.4.1,4.3.1
Step up your Open Source Security Game with Mend here
CVE-2018-14042
Vulnerable Library - bootstrap-4.0.0.min.js
The most popular front-end framework for developing responsive, mobile first projects on the web.
Library home page: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.0.0/js/bootstrap.min.js
Path to dependency file: /blockchain_integration/pi_network/PiFusion/pi_fusion_dashboard/templates/base.html
Path to vulnerable library: /blockchain_integration/pi_network/PiFusion/pi_fusion_dashboard/templates/base.html
Dependency Hierarchy:
Found in HEAD commit: 3f4e44c5da32bed8968f0821ee76f99874840f22
Found in base branch: main
Vulnerability Details
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
Publish Date: 2018-07-13
URL: CVE-2018-14042
CVSS 3 Score Details (6.1)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Origin: https://nvd.nist.gov/vuln/detail/CVE-2018-14042
Release Date: 2018-07-13
Fix Resolution: bootstrap - 3.4.0,4.1.2
Step up your Open Source Security Game with Mend here
CVE-2018-14041
Vulnerable Library - bootstrap-4.0.0.min.js
The most popular front-end framework for developing responsive, mobile first projects on the web.
Library home page: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.0.0/js/bootstrap.min.js
Path to dependency file: /blockchain_integration/pi_network/PiFusion/pi_fusion_dashboard/templates/base.html
Path to vulnerable library: /blockchain_integration/pi_network/PiFusion/pi_fusion_dashboard/templates/base.html
Dependency Hierarchy:
Found in HEAD commit: 3f4e44c5da32bed8968f0821ee76f99874840f22
Found in base branch: main
Vulnerability Details
In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.
Publish Date: 2018-07-13
URL: CVE-2018-14041
CVSS 3 Score Details (6.1)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Release Date: 2018-07-13
Fix Resolution: org.webjars.npm:bootstrap:4.1.2.org.webjars:bootstrap:4.1.2
Step up your Open Source Security Game with Mend here
CVE-2018-14040
Vulnerable Library - bootstrap-4.0.0.min.js
The most popular front-end framework for developing responsive, mobile first projects on the web.
Library home page: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.0.0/js/bootstrap.min.js
Path to dependency file: /blockchain_integration/pi_network/PiFusion/pi_fusion_dashboard/templates/base.html
Path to vulnerable library: /blockchain_integration/pi_network/PiFusion/pi_fusion_dashboard/templates/base.html
Dependency Hierarchy:
Found in HEAD commit: 3f4e44c5da32bed8968f0821ee76f99874840f22
Found in base branch: main
Vulnerability Details
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.
Publish Date: 2018-07-13
URL: CVE-2018-14040
CVSS 3 Score Details (3.7)
Base Score Metrics:
Suggested Fix
Type: Upgrade version
Release Date: 2018-07-13
Fix Resolution: org.webjars.npm:bootstrap:4.1.2,org.webjars:bootstrap:3.4.0
Step up your Open Source Security Game with Mend here
The text was updated successfully, but these errors were encountered: