bootstrap
The most popular front-end framework for developing responsive, mobile first projects on the web.
Activity
- Latest release
- 1y ago
- Total releases
- 76
- Cadence
- ~41 days
- Last 12 months
- 0
Details
- License
- MIT
- First release
- May 20, 2012
| Version | Released | |
|---|---|---|
5.3.8
patch
|
5.3.8
patch
|
|
5.3.7
patch
|
5.3.7
patch
|
|
5.3.6
patch
|
5.3.6
patch
|
|
5.3.5
patch
|
5.3.5
patch
|
|
5.3.3
patch
|
5.3.3
patch
|
|
4.6.2
patch
|
4.6.2
patch
Dependencies (2)
|
|
5.3.2
patch
|
5.3.2
patch
|
|
5.3.1
patch
|
5.3.1
patch
|
|
5.3.0
minor
|
5.3.0
minor
|
|
5.3.0-alpha3
pre
|
5.3.0-alpha3
pre
|
|
5.3.0-alpha2
pre
|
5.3.0-alpha2
pre
|
|
5.3.0-alpha1
pre
|
5.3.0-alpha1
pre
|
|
5.2.3
patch
|
5.2.3
patch
|
|
5.2.2
patch
|
5.2.2
patch
|
|
5.2.1
patch
|
5.2.1
patch
|
|
5.2.0
minor
|
5.2.0
minor
|
|
5.2.0-beta1
pre
|
5.2.0-beta1
pre
|
|
4.6.1
patch
|
4.6.1
patch
Dependencies (2)
|
|
5.1.3
patch
|
5.1.3
patch
|
|
5.1.2
patch
|
5.1.2
patch
|
|
5.1.1
patch
|
5.1.1
patch
|
|
5.1.0
minor
|
5.1.0
minor
|
|
5.0.2
patch
|
5.0.2
patch
|
|
5.0.1
patch
|
5.0.1
patch
|
|
5.0.0
major
|
5.0.0
major
|
|
5.0.0-beta3
pre
|
5.0.0-beta3
pre
|
|
5.0.0-beta2
pre
|
5.0.0-beta2
pre
|
|
4.6.0
minor
|
4.6.0
minor
Dependencies (2)
|
|
5.0.0-beta1
pre
|
5.0.0-beta1
pre
|
|
5.0.0-alpha3
pre
|
5.0.0-alpha3
pre
Dependencies (1)
|
|
4.5.3
patch
|
4.5.3
patch
Dependencies (2)
|
|
5.0.0-alpha2
pre
|
5.0.0-alpha2
pre
Dependencies (1)
|
|
4.5.2
patch
|
4.5.2
patch
Dependencies (2)
|
|
4.5.1
patch
|
4.5.1
patch
Dependencies (2)
|
|
5.0.0-alpha1
pre
|
5.0.0-alpha1
pre
Dependencies (1)
|
|
4.5.0
minor
|
4.5.0
minor
Dependencies (2)
|
|
4.4.1-content-files
pre
|
4.4.1-content-files
pre
Dependencies (2)
|
|
4.4.1
patch
|
4.4.1
patch
Dependencies (2)
|
|
4.4.0
minor
|
4.4.0
minor
Dependencies (2)
|
|
4.3.1
minor
|
4.3.1
minor
Dependencies (2)
|
|
3.4.1
patch
|
3.4.1
patch
Dependencies (1)
|
|
4.2.1
minor
1 CVE
CVE-2019-8331
GHSA-9v3m-8fp8-mj99
Feb 22, 2019
Bootstrap Vulnerable to Cross-Site Scripting
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
Versions of RecommendationFor Affected versions
4.0.0
4.1.0
4.1.1
4.1.1-contentFiles
4.1.2
4.1.3
4.2.1
3.0.0
3.0.1
3.0.2
3.0.3
3.1.0
+ 12 more Show less
3.1.1
3.2.0
3.3.0
3.3.1
3.3.2
3.3.4
3.3.5
3.3.6
3.3.6-jQuery3
3.3.6.1
3.3.7
3.4.0
Fixed in
3.4.1
4.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev |
4.2.1
minor
Dependencies (2)
|
|
3.4.0
minor
1 CVE
CVE-2019-8331
GHSA-9v3m-8fp8-mj99
Feb 22, 2019
Bootstrap Vulnerable to Cross-Site Scripting
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
Versions of RecommendationFor Affected versions
4.0.0
4.1.0
4.1.1
4.1.1-contentFiles
4.1.2
4.1.3
4.2.1
3.0.0
3.0.1
3.0.2
3.0.3
3.1.0
+ 12 more Show less
3.1.1
3.2.0
3.3.0
3.3.1
3.3.2
3.3.4
3.3.5
3.3.6
3.3.6-jQuery3
3.3.6.1
3.3.7
3.4.0
Fixed in
3.4.1
4.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev |
3.4.0
minor
Dependencies (1)
|
|
4.1.3
patch
1 CVE
CVE-2019-8331
GHSA-9v3m-8fp8-mj99
Feb 22, 2019
Bootstrap Vulnerable to Cross-Site Scripting
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
Versions of RecommendationFor Affected versions
4.0.0
4.1.0
4.1.1
4.1.1-contentFiles
4.1.2
4.1.3
4.2.1
3.0.0
3.0.1
3.0.2
3.0.3
3.1.0
+ 12 more Show less
3.1.1
3.2.0
3.3.0
3.3.1
3.3.2
3.3.4
3.3.5
3.3.6
3.3.6-jQuery3
3.3.6.1
3.3.7
3.4.0
Fixed in
3.4.1
4.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev |
4.1.3
patch
Dependencies (2)
|
|
4.1.2
patch
1 CVE
CVE-2019-8331
GHSA-9v3m-8fp8-mj99
Feb 22, 2019
Bootstrap Vulnerable to Cross-Site Scripting
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
Versions of RecommendationFor Affected versions
4.0.0
4.1.0
4.1.1
4.1.1-contentFiles
4.1.2
4.1.3
4.2.1
3.0.0
3.0.1
3.0.2
3.0.3
3.1.0
+ 12 more Show less
3.1.1
3.2.0
3.3.0
3.3.1
3.3.2
3.3.4
3.3.5
3.3.6
3.3.6-jQuery3
3.3.6.1
3.3.7
3.4.0
Fixed in
3.4.1
4.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev |
4.1.2
patch
Dependencies (2)
|
|
4.1.1-contentFiles
pre
4 CVEs
CVE-2018-14040
GHSA-3wqf-4x89-9g79
May 13, 2022
Bootstrap vulnerable to Cross-Site Scripting (XSS)
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap starting in version 2.3.0 and prior to 3.4.0, as well as 4.x before 4.1.2, XSS is possible in the collapse data-parent attribute. Affected versions
2.3.1
2.3.2
3.0.0
3.0.1
3.0.2
3.0.3
3.1.0
3.1.1
3.2.0
3.3.0
3.3.1
3.3.2
+ 10 more Show less
3.3.4
3.3.5
3.3.6
3.3.6-jQuery3
3.3.6.1
3.3.7
4.0.0
4.1.0
4.1.1
4.1.1-contentFiles
Fixed in
3.4.0
4.1.2
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2019-8331
GHSA-9v3m-8fp8-mj99
Feb 22, 2019
Bootstrap Vulnerable to Cross-Site Scripting
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
Versions of RecommendationFor Affected versions
4.0.0
4.1.0
4.1.1
4.1.1-contentFiles
4.1.2
4.1.3
4.2.1
3.0.0
3.0.1
3.0.2
3.0.3
3.1.0
+ 12 more Show less
3.1.1
3.2.0
3.3.0
3.3.1
3.3.2
3.3.4
3.3.5
3.3.6
3.3.6-jQuery3
3.3.6.1
3.3.7
3.4.0
Fixed in
3.4.1
4.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2018-14042
GHSA-7mvr-5x2g-wfc8
Sep 13, 2018
Bootstrap Cross-site Scripting vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap starting in version 2.3.0 and prior to versions 3.4.0 and 4.1.2, XSS is possible in the data-container property of tooltip. This is similar to CVE-2018-14041. Affected versions
4.0.0
4.1.0
4.1.1
4.1.1-contentFiles
2.3.1
2.3.2
3.0.0
3.0.1
3.0.2
3.0.3
3.1.0
3.1.1
+ 10 more Show less
3.2.0
3.3.0
3.3.1
3.3.2
3.3.4
3.3.5
3.3.6
3.3.6-jQuery3
3.3.6.1
3.3.7
Fixed in
3.4.0
4.1.2
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2018-14041
GHSA-pj7m-g53m-7638
Sep 13, 2018
Bootstrap Cross-site Scripting vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap 4.x before 4.1.2, XSS is possible in the data-target property of scrollspy. This is similar to CVE-2018-14042. Affected versions
4.0.0
4.1.0
4.1.1
4.1.1-contentFiles
Fixed in
4.1.2
References
Updated Nov 20, 2025 · Source: OSV.dev |
4.1.1-contentFiles
pre
Dependencies (2)
|
|
4.1.1
patch
4 CVEs
CVE-2018-14040
GHSA-3wqf-4x89-9g79
May 13, 2022
Bootstrap vulnerable to Cross-Site Scripting (XSS)
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap starting in version 2.3.0 and prior to 3.4.0, as well as 4.x before 4.1.2, XSS is possible in the collapse data-parent attribute. Affected versions
2.3.1
2.3.2
3.0.0
3.0.1
3.0.2
3.0.3
3.1.0
3.1.1
3.2.0
3.3.0
3.3.1
3.3.2
+ 10 more Show less
3.3.4
3.3.5
3.3.6
3.3.6-jQuery3
3.3.6.1
3.3.7
4.0.0
4.1.0
4.1.1
4.1.1-contentFiles
Fixed in
3.4.0
4.1.2
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2019-8331
GHSA-9v3m-8fp8-mj99
Feb 22, 2019
Bootstrap Vulnerable to Cross-Site Scripting
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
Versions of RecommendationFor Affected versions
4.0.0
4.1.0
4.1.1
4.1.1-contentFiles
4.1.2
4.1.3
4.2.1
3.0.0
3.0.1
3.0.2
3.0.3
3.1.0
+ 12 more Show less
3.1.1
3.2.0
3.3.0
3.3.1
3.3.2
3.3.4
3.3.5
3.3.6
3.3.6-jQuery3
3.3.6.1
3.3.7
3.4.0
Fixed in
3.4.1
4.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2018-14042
GHSA-7mvr-5x2g-wfc8
Sep 13, 2018
Bootstrap Cross-site Scripting vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap starting in version 2.3.0 and prior to versions 3.4.0 and 4.1.2, XSS is possible in the data-container property of tooltip. This is similar to CVE-2018-14041. Affected versions
4.0.0
4.1.0
4.1.1
4.1.1-contentFiles
2.3.1
2.3.2
3.0.0
3.0.1
3.0.2
3.0.3
3.1.0
3.1.1
+ 10 more Show less
3.2.0
3.3.0
3.3.1
3.3.2
3.3.4
3.3.5
3.3.6
3.3.6-jQuery3
3.3.6.1
3.3.7
Fixed in
3.4.0
4.1.2
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2018-14041
GHSA-pj7m-g53m-7638
Sep 13, 2018
Bootstrap Cross-site Scripting vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap 4.x before 4.1.2, XSS is possible in the data-target property of scrollspy. This is similar to CVE-2018-14042. Affected versions
4.0.0
4.1.0
4.1.1
4.1.1-contentFiles
Fixed in
4.1.2
References
Updated Nov 20, 2025 · Source: OSV.dev |
4.1.1
patch
Dependencies (2)
|
|
4.1.0
minor
4 CVEs
CVE-2018-14040
GHSA-3wqf-4x89-9g79
May 13, 2022
Bootstrap vulnerable to Cross-Site Scripting (XSS)
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap starting in version 2.3.0 and prior to 3.4.0, as well as 4.x before 4.1.2, XSS is possible in the collapse data-parent attribute. Affected versions
2.3.1
2.3.2
3.0.0
3.0.1
3.0.2
3.0.3
3.1.0
3.1.1
3.2.0
3.3.0
3.3.1
3.3.2
+ 10 more Show less
3.3.4
3.3.5
3.3.6
3.3.6-jQuery3
3.3.6.1
3.3.7
4.0.0
4.1.0
4.1.1
4.1.1-contentFiles
Fixed in
3.4.0
4.1.2
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2019-8331
GHSA-9v3m-8fp8-mj99
Feb 22, 2019
Bootstrap Vulnerable to Cross-Site Scripting
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
Versions of RecommendationFor Affected versions
4.0.0
4.1.0
4.1.1
4.1.1-contentFiles
4.1.2
4.1.3
4.2.1
3.0.0
3.0.1
3.0.2
3.0.3
3.1.0
+ 12 more Show less
3.1.1
3.2.0
3.3.0
3.3.1
3.3.2
3.3.4
3.3.5
3.3.6
3.3.6-jQuery3
3.3.6.1
3.3.7
3.4.0
Fixed in
3.4.1
4.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2018-14042
GHSA-7mvr-5x2g-wfc8
Sep 13, 2018
Bootstrap Cross-site Scripting vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap starting in version 2.3.0 and prior to versions 3.4.0 and 4.1.2, XSS is possible in the data-container property of tooltip. This is similar to CVE-2018-14041. Affected versions
4.0.0
4.1.0
4.1.1
4.1.1-contentFiles
2.3.1
2.3.2
3.0.0
3.0.1
3.0.2
3.0.3
3.1.0
3.1.1
+ 10 more Show less
3.2.0
3.3.0
3.3.1
3.3.2
3.3.4
3.3.5
3.3.6
3.3.6-jQuery3
3.3.6.1
3.3.7
Fixed in
3.4.0
4.1.2
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2018-14041
GHSA-pj7m-g53m-7638
Sep 13, 2018
Bootstrap Cross-site Scripting vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap 4.x before 4.1.2, XSS is possible in the data-target property of scrollspy. This is similar to CVE-2018-14042. Affected versions
4.0.0
4.1.0
4.1.1
4.1.1-contentFiles
Fixed in
4.1.2
References
Updated Nov 20, 2025 · Source: OSV.dev |
4.1.0
minor
Dependencies (2)
|
|
4.0.0
major
4 CVEs
CVE-2018-14040
GHSA-3wqf-4x89-9g79
May 13, 2022
Bootstrap vulnerable to Cross-Site Scripting (XSS)
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap starting in version 2.3.0 and prior to 3.4.0, as well as 4.x before 4.1.2, XSS is possible in the collapse data-parent attribute. Affected versions
2.3.1
2.3.2
3.0.0
3.0.1
3.0.2
3.0.3
3.1.0
3.1.1
3.2.0
3.3.0
3.3.1
3.3.2
+ 10 more Show less
3.3.4
3.3.5
3.3.6
3.3.6-jQuery3
3.3.6.1
3.3.7
4.0.0
4.1.0
4.1.1
4.1.1-contentFiles
Fixed in
3.4.0
4.1.2
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2019-8331
GHSA-9v3m-8fp8-mj99
Feb 22, 2019
Bootstrap Vulnerable to Cross-Site Scripting
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
Versions of RecommendationFor Affected versions
4.0.0
4.1.0
4.1.1
4.1.1-contentFiles
4.1.2
4.1.3
4.2.1
3.0.0
3.0.1
3.0.2
3.0.3
3.1.0
+ 12 more Show less
3.1.1
3.2.0
3.3.0
3.3.1
3.3.2
3.3.4
3.3.5
3.3.6
3.3.6-jQuery3
3.3.6.1
3.3.7
3.4.0
Fixed in
3.4.1
4.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2018-14042
GHSA-7mvr-5x2g-wfc8
Sep 13, 2018
Bootstrap Cross-site Scripting vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap starting in version 2.3.0 and prior to versions 3.4.0 and 4.1.2, XSS is possible in the data-container property of tooltip. This is similar to CVE-2018-14041. Affected versions
4.0.0
4.1.0
4.1.1
4.1.1-contentFiles
2.3.1
2.3.2
3.0.0
3.0.1
3.0.2
3.0.3
3.1.0
3.1.1
+ 10 more Show less
3.2.0
3.3.0
3.3.1
3.3.2
3.3.4
3.3.5
3.3.6
3.3.6-jQuery3
3.3.6.1
3.3.7
Fixed in
3.4.0
4.1.2
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2018-14041
GHSA-pj7m-g53m-7638
Sep 13, 2018
Bootstrap Cross-site Scripting vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap 4.x before 4.1.2, XSS is possible in the data-target property of scrollspy. This is similar to CVE-2018-14042. Affected versions
4.0.0
4.1.0
4.1.1
4.1.1-contentFiles
Fixed in
4.1.2
References
Updated Nov 20, 2025 · Source: OSV.dev |
4.0.0
major
Dependencies (2)
|
|
4.0.0-beta3
pre
|
4.0.0-beta3
pre
Dependencies (2)
|