bootstrap
The most popular HTML, CSS, and JavaScript framework for developing responsive, mobile first projects on the web. http://getbootstrap.com
View on Github
Activity
- Latest release
- 8mo ago
- Total releases
- 54
- Cadence
- ~2 months
- Last 12 months
- 3
Reach
- Stars
- —
Details
- License
- MIT
- First release
- Nov 02, 2015
| Version | Released | |
|---|---|---|
5.3.6
patch
|
5.3.6
patch
Dependencies (13)
+ 5 more
Changelog
Compare changes
|
|
5.3.7
patch
|
5.3.7
patch
Dependencies (13)
+ 5 more
Changelog
Compare changes
|
|
5.3.8
patch
|
5.3.8
patch
Dependencies (13)
+ 5 more
Changelog
Compare changes
|
|
5.3.5
patch
|
5.3.5
patch
Dependencies (13)
+ 5 more
Changelog
Compare changes
|
|
5.3.4
patch
|
5.3.4
patch
Dependencies (13)
+ 5 more
Changelog
Compare changes
|
|
4.6.2.1
patch
|
4.6.2.1
patch
Dependencies (14)
+ 6 more
Changelog
Compare changes
|
|
5.3.3
patch
|
5.3.3
patch
Dependencies (14)
+ 6 more
Changelog
Compare changes
|
|
5.3.2
patch
|
5.3.2
patch
Dependencies (14)
+ 6 more
Changelog
Compare changes
|
|
5.3.0
minor
|
5.3.0
minor
Dependencies (13)
+ 5 more
Changelog
Compare changes
|
|
5.3.1
patch
|
5.3.1
patch
Dependencies (13)
+ 5 more
Changelog
Compare changes
|
|
5.3.0.alpha3
pre
|
5.3.0.alpha3
pre
Dependencies (13)
+ 5 more
Changelog
Compare changes
|
|
5.2.3
patch
|
5.2.3
patch
Dependencies (13)
+ 5 more
Changelog
Compare changes
|
|
5.2.2
patch
|
5.2.2
patch
Dependencies (13)
+ 5 more
Changelog
Compare changes
|
|
4.6.2
patch
|
4.6.2
patch
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
5.2.1
patch
|
5.2.1
patch
Dependencies (13)
+ 5 more
Changelog
Compare changes
|
|
5.2.0
minor
|
5.2.0
minor
Dependencies (13)
+ 5 more
Changelog
Compare changes
|
|
4.6.1
patch
|
4.6.1
patch
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
5.1.2
patch
|
5.1.2
patch
Dependencies (13)
+ 5 more
Changelog
Compare changes
|
|
5.1.3
patch
|
5.1.3
patch
Dependencies (13)
+ 5 more
Changelog
Compare changes
|
|
5.1.1
patch
|
5.1.1
patch
Dependencies (13)
+ 5 more
Changelog
Compare changes
|
|
5.0.2
patch
|
5.0.2
patch
Dependencies (13)
+ 5 more
Changelog
Compare changes
|
|
5.1.0
minor
|
5.1.0
minor
Dependencies (13)
+ 5 more
Changelog
Compare changes
|
|
5.0.1
patch
|
5.0.1
patch
Dependencies (13)
+ 5 more
Changelog
Compare changes
|
|
5.0.0
major
|
5.0.0
major
Dependencies (13)
+ 5 more
Changelog
Compare changes
|
|
5.0.0.beta3
pre
|
5.0.0.beta3
pre
Dependencies (13)
+ 5 more
Changelog
Compare changes
|
|
5.0.0.beta2
pre
|
5.0.0.beta2
pre
Dependencies (13)
+ 5 more
Changelog
Compare changes
|
|
4.6.0
minor
|
4.6.0
minor
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
5.0.0.beta1
pre
|
5.0.0.beta1
pre
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
5.0.0.alpha3
pre
|
5.0.0.alpha3
pre
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
4.5.3
patch
|
4.5.3
patch
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
5.0.0.alpha2
pre
|
5.0.0.alpha2
pre
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
5.0.0.alpha1
pre
|
5.0.0.alpha1
pre
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
4.5.2
patch
|
4.5.2
patch
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
4.5.0
minor
|
4.5.0
minor
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
4.4.1
minor
|
4.4.1
minor
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
4.3.1
patch
|
4.3.1
patch
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
4.3.0
minor
1 CVE
CVE-2019-8331
GHSA-9v3m-8fp8-mj99
Feb 22, 2019
Bootstrap Vulnerable to Cross-Site Scripting
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
Versions of RecommendationFor Affected versions
4.0.0
4.0.0.alpha1
4.0.0.alpha2
4.0.0.alpha3
4.0.0.alpha3.1
4.0.0.alpha4
4.0.0.alpha5
4.0.0.alpha6
4.0.0.beta
4.0.0.beta2
4.0.0.beta2.1
4.0.0.beta3
+ 6 more Show less
4.1.0
4.1.1
4.1.2
4.1.3
4.2.1
4.3.0
Fixed in
4.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev |
4.3.0
minor
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
4.2.1
minor
1 CVE
CVE-2019-8331
GHSA-9v3m-8fp8-mj99
Feb 22, 2019
Bootstrap Vulnerable to Cross-Site Scripting
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
Versions of RecommendationFor Affected versions
4.0.0
4.0.0.alpha1
4.0.0.alpha2
4.0.0.alpha3
4.0.0.alpha3.1
4.0.0.alpha4
4.0.0.alpha5
4.0.0.alpha6
4.0.0.beta
4.0.0.beta2
4.0.0.beta2.1
4.0.0.beta3
+ 6 more Show less
4.1.0
4.1.1
4.1.2
4.1.3
4.2.1
4.3.0
Fixed in
4.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev |
4.2.1
minor
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
4.1.3
patch
1 CVE
CVE-2019-8331
GHSA-9v3m-8fp8-mj99
Feb 22, 2019
Bootstrap Vulnerable to Cross-Site Scripting
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
Versions of RecommendationFor Affected versions
4.0.0
4.0.0.alpha1
4.0.0.alpha2
4.0.0.alpha3
4.0.0.alpha3.1
4.0.0.alpha4
4.0.0.alpha5
4.0.0.alpha6
4.0.0.beta
4.0.0.beta2
4.0.0.beta2.1
4.0.0.beta3
+ 6 more Show less
4.1.0
4.1.1
4.1.2
4.1.3
4.2.1
4.3.0
Fixed in
4.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev |
4.1.3
patch
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
4.1.2
patch
1 CVE
CVE-2019-8331
GHSA-9v3m-8fp8-mj99
Feb 22, 2019
Bootstrap Vulnerable to Cross-Site Scripting
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
Versions of RecommendationFor Affected versions
4.0.0
4.0.0.alpha1
4.0.0.alpha2
4.0.0.alpha3
4.0.0.alpha3.1
4.0.0.alpha4
4.0.0.alpha5
4.0.0.alpha6
4.0.0.beta
4.0.0.beta2
4.0.0.beta2.1
4.0.0.beta3
+ 6 more Show less
4.1.0
4.1.1
4.1.2
4.1.3
4.2.1
4.3.0
Fixed in
4.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev |
4.1.2
patch
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
4.1.1
patch
4 CVEs
CVE-2018-14040
GHSA-3wqf-4x89-9g79
May 13, 2022
Bootstrap vulnerable to Cross-Site Scripting (XSS)
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap starting in version 2.3.0 and prior to 3.4.0, as well as 4.x before 4.1.2, XSS is possible in the collapse data-parent attribute. Affected versions
4.0.0
4.1.0
4.1.1
Fixed in
3.4.0
4.1.2
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2019-8331
GHSA-9v3m-8fp8-mj99
Feb 22, 2019
Bootstrap Vulnerable to Cross-Site Scripting
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
Versions of RecommendationFor Affected versions
4.0.0
4.0.0.alpha1
4.0.0.alpha2
4.0.0.alpha3
4.0.0.alpha3.1
4.0.0.alpha4
4.0.0.alpha5
4.0.0.alpha6
4.0.0.beta
4.0.0.beta2
4.0.0.beta2.1
4.0.0.beta3
+ 6 more Show less
4.1.0
4.1.1
4.1.2
4.1.3
4.2.1
4.3.0
Fixed in
4.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2018-14042
GHSA-7mvr-5x2g-wfc8
Sep 13, 2018
Bootstrap Cross-site Scripting vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap starting in version 2.3.0 and prior to versions 3.4.0 and 4.1.2, XSS is possible in the data-container property of tooltip. This is similar to CVE-2018-14041. Affected versions
4.0.0
4.1.0
4.1.1
Fixed in
3.4.0
4.1.2
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2018-14041
GHSA-pj7m-g53m-7638
Sep 13, 2018
Bootstrap Cross-site Scripting vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap 4.x before 4.1.2, XSS is possible in the data-target property of scrollspy. This is similar to CVE-2018-14042. Affected versions
4.0.0
4.1.0
4.1.1
Fixed in
4.1.2
References
Updated Nov 20, 2025 · Source: OSV.dev |
4.1.1
patch
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
4.1.0
minor
4 CVEs
CVE-2018-14040
GHSA-3wqf-4x89-9g79
May 13, 2022
Bootstrap vulnerable to Cross-Site Scripting (XSS)
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap starting in version 2.3.0 and prior to 3.4.0, as well as 4.x before 4.1.2, XSS is possible in the collapse data-parent attribute. Affected versions
4.0.0
4.1.0
4.1.1
Fixed in
3.4.0
4.1.2
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2019-8331
GHSA-9v3m-8fp8-mj99
Feb 22, 2019
Bootstrap Vulnerable to Cross-Site Scripting
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
Versions of RecommendationFor Affected versions
4.0.0
4.0.0.alpha1
4.0.0.alpha2
4.0.0.alpha3
4.0.0.alpha3.1
4.0.0.alpha4
4.0.0.alpha5
4.0.0.alpha6
4.0.0.beta
4.0.0.beta2
4.0.0.beta2.1
4.0.0.beta3
+ 6 more Show less
4.1.0
4.1.1
4.1.2
4.1.3
4.2.1
4.3.0
Fixed in
4.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2018-14042
GHSA-7mvr-5x2g-wfc8
Sep 13, 2018
Bootstrap Cross-site Scripting vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap starting in version 2.3.0 and prior to versions 3.4.0 and 4.1.2, XSS is possible in the data-container property of tooltip. This is similar to CVE-2018-14041. Affected versions
4.0.0
4.1.0
4.1.1
Fixed in
3.4.0
4.1.2
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2018-14041
GHSA-pj7m-g53m-7638
Sep 13, 2018
Bootstrap Cross-site Scripting vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap 4.x before 4.1.2, XSS is possible in the data-target property of scrollspy. This is similar to CVE-2018-14042. Affected versions
4.0.0
4.1.0
4.1.1
Fixed in
4.1.2
References
Updated Nov 20, 2025 · Source: OSV.dev |
4.1.0
minor
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
4.0.0
initial
4 CVEs
CVE-2018-14040
GHSA-3wqf-4x89-9g79
May 13, 2022
Bootstrap vulnerable to Cross-Site Scripting (XSS)
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap starting in version 2.3.0 and prior to 3.4.0, as well as 4.x before 4.1.2, XSS is possible in the collapse data-parent attribute. Affected versions
4.0.0
4.1.0
4.1.1
Fixed in
3.4.0
4.1.2
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2019-8331
GHSA-9v3m-8fp8-mj99
Feb 22, 2019
Bootstrap Vulnerable to Cross-Site Scripting
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
Versions of RecommendationFor Affected versions
4.0.0
4.0.0.alpha1
4.0.0.alpha2
4.0.0.alpha3
4.0.0.alpha3.1
4.0.0.alpha4
4.0.0.alpha5
4.0.0.alpha6
4.0.0.beta
4.0.0.beta2
4.0.0.beta2.1
4.0.0.beta3
+ 6 more Show less
4.1.0
4.1.1
4.1.2
4.1.3
4.2.1
4.3.0
Fixed in
4.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2018-14042
GHSA-7mvr-5x2g-wfc8
Sep 13, 2018
Bootstrap Cross-site Scripting vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap starting in version 2.3.0 and prior to versions 3.4.0 and 4.1.2, XSS is possible in the data-container property of tooltip. This is similar to CVE-2018-14041. Affected versions
4.0.0
4.1.0
4.1.1
Fixed in
3.4.0
4.1.2
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2018-14041
GHSA-pj7m-g53m-7638
Sep 13, 2018
Bootstrap Cross-site Scripting vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap 4.x before 4.1.2, XSS is possible in the data-target property of scrollspy. This is similar to CVE-2018-14042. Affected versions
4.0.0
4.1.0
4.1.1
Fixed in
4.1.2
References
Updated Nov 20, 2025 · Source: OSV.dev |
4.0.0
initial
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
4.0.0.beta3
pre
1 CVE
CVE-2019-8331
GHSA-9v3m-8fp8-mj99
Feb 22, 2019
Bootstrap Vulnerable to Cross-Site Scripting
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
Versions of RecommendationFor Affected versions
4.0.0
4.0.0.alpha1
4.0.0.alpha2
4.0.0.alpha3
4.0.0.alpha3.1
4.0.0.alpha4
4.0.0.alpha5
4.0.0.alpha6
4.0.0.beta
4.0.0.beta2
4.0.0.beta2.1
4.0.0.beta3
+ 6 more Show less
4.1.0
4.1.1
4.1.2
4.1.3
4.2.1
4.3.0
Fixed in
4.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev |
4.0.0.beta3
pre
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
4.0.0.beta2.1
pre
1 CVE
CVE-2019-8331
GHSA-9v3m-8fp8-mj99
Feb 22, 2019
Bootstrap Vulnerable to Cross-Site Scripting
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
Versions of RecommendationFor Affected versions
4.0.0
4.0.0.alpha1
4.0.0.alpha2
4.0.0.alpha3
4.0.0.alpha3.1
4.0.0.alpha4
4.0.0.alpha5
4.0.0.alpha6
4.0.0.beta
4.0.0.beta2
4.0.0.beta2.1
4.0.0.beta3
+ 6 more Show less
4.1.0
4.1.1
4.1.2
4.1.3
4.2.1
4.3.0
Fixed in
4.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev |
4.0.0.beta2.1
pre
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
4.0.0.beta2
pre
1 CVE
CVE-2019-8331
GHSA-9v3m-8fp8-mj99
Feb 22, 2019
Bootstrap Vulnerable to Cross-Site Scripting
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
Versions of RecommendationFor Affected versions
4.0.0
4.0.0.alpha1
4.0.0.alpha2
4.0.0.alpha3
4.0.0.alpha3.1
4.0.0.alpha4
4.0.0.alpha5
4.0.0.alpha6
4.0.0.beta
4.0.0.beta2
4.0.0.beta2.1
4.0.0.beta3
+ 6 more Show less
4.1.0
4.1.1
4.1.2
4.1.3
4.2.1
4.3.0
Fixed in
4.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev |
4.0.0.beta2
pre
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
4.0.0.beta
pre
2 CVEs
CVE-2019-8331
GHSA-9v3m-8fp8-mj99
Feb 22, 2019
Bootstrap Vulnerable to Cross-Site Scripting
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
Versions of RecommendationFor Affected versions
4.0.0
4.0.0.alpha1
4.0.0.alpha2
4.0.0.alpha3
4.0.0.alpha3.1
4.0.0.alpha4
4.0.0.alpha5
4.0.0.alpha6
4.0.0.beta
4.0.0.beta2
4.0.0.beta2.1
4.0.0.beta3
+ 6 more Show less
4.1.0
4.1.1
4.1.2
4.1.3
4.2.1
4.3.0
Fixed in
4.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2016-10735
GHSA-4p24-vmcr-4gqj
Jan 17, 2019
Bootstrap Cross-site Scripting vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap 2.x from 2.0.4, 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute. Note that this is a different vulnerability than CVE-2018-14041. See https://blog.getbootstrap.com/2018/12/13/bootstrap-3-4-0/ for more info. Fixed in
4.0.0-beta.2
References Updated Sep 10, 2026 · Source: OSV.dev |
4.0.0.beta
pre
Dependencies (16)
+ 8 more
Changelog
Compare changes
|
|
4.0.0.alpha6
pre
2 CVEs
CVE-2019-8331
GHSA-9v3m-8fp8-mj99
Feb 22, 2019
Bootstrap Vulnerable to Cross-Site Scripting
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
Versions of RecommendationFor Affected versions
4.0.0
4.0.0.alpha1
4.0.0.alpha2
4.0.0.alpha3
4.0.0.alpha3.1
4.0.0.alpha4
4.0.0.alpha5
4.0.0.alpha6
4.0.0.beta
4.0.0.beta2
4.0.0.beta2.1
4.0.0.beta3
+ 6 more Show less
4.1.0
4.1.1
4.1.2
4.1.3
4.2.1
4.3.0
Fixed in
4.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2016-10735
GHSA-4p24-vmcr-4gqj
Jan 17, 2019
Bootstrap Cross-site Scripting vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap 2.x from 2.0.4, 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute. Note that this is a different vulnerability than CVE-2018-14041. See https://blog.getbootstrap.com/2018/12/13/bootstrap-3-4-0/ for more info. Fixed in
4.0.0-beta.2
References Updated Sep 10, 2026 · Source: OSV.dev |
4.0.0.alpha6
pre
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
4.0.0.alpha5
pre
2 CVEs
CVE-2019-8331
GHSA-9v3m-8fp8-mj99
Feb 22, 2019
Bootstrap Vulnerable to Cross-Site Scripting
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
Versions of RecommendationFor Affected versions
4.0.0
4.0.0.alpha1
4.0.0.alpha2
4.0.0.alpha3
4.0.0.alpha3.1
4.0.0.alpha4
4.0.0.alpha5
4.0.0.alpha6
4.0.0.beta
4.0.0.beta2
4.0.0.beta2.1
4.0.0.beta3
+ 6 more Show less
4.1.0
4.1.1
4.1.2
4.1.3
4.2.1
4.3.0
Fixed in
4.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2016-10735
GHSA-4p24-vmcr-4gqj
Jan 17, 2019
Bootstrap Cross-site Scripting vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap 2.x from 2.0.4, 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute. Note that this is a different vulnerability than CVE-2018-14041. See https://blog.getbootstrap.com/2018/12/13/bootstrap-3-4-0/ for more info. Fixed in
4.0.0-beta.2
References Updated Sep 10, 2026 · Source: OSV.dev |
4.0.0.alpha5
pre
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
4.0.0.alpha4
pre
2 CVEs
CVE-2019-8331
GHSA-9v3m-8fp8-mj99
Feb 22, 2019
Bootstrap Vulnerable to Cross-Site Scripting
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
Versions of RecommendationFor Affected versions
4.0.0
4.0.0.alpha1
4.0.0.alpha2
4.0.0.alpha3
4.0.0.alpha3.1
4.0.0.alpha4
4.0.0.alpha5
4.0.0.alpha6
4.0.0.beta
4.0.0.beta2
4.0.0.beta2.1
4.0.0.beta3
+ 6 more Show less
4.1.0
4.1.1
4.1.2
4.1.3
4.2.1
4.3.0
Fixed in
4.3.1
References
Updated Sep 10, 2026 · Source: OSV.dev
CVE-2016-10735
GHSA-4p24-vmcr-4gqj
Jan 17, 2019
Bootstrap Cross-site Scripting vulnerability
6.1
/ 10
Medium
Network
Low
None
Required
Changed
Low
Low
None
In Bootstrap 2.x from 2.0.4, 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute. Note that this is a different vulnerability than CVE-2018-14041. See https://blog.getbootstrap.com/2018/12/13/bootstrap-3-4-0/ for more info. Fixed in
4.0.0-beta.2
References Updated Sep 10, 2026 · Source: OSV.dev |
4.0.0.alpha4
pre
Dependencies (15)
+ 7 more
Changelog
Compare changes
|