Package impact

npm / bootstrap

CVE	Severity	CVSS	Risk	Published	Description	Impact
CVE-2018-14040	medium	—	5.5	4y ago	Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update	+3
CVE-2019-8331	medium	—	5.5	7y ago	Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update	+3
CVE-2018-20677	medium	—	5.5	8y ago	Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update	+3
CVE-2018-20676	medium	—	5.5	8y ago	Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update	+3
CVE-2018-14042	medium	—	5.5	8y ago	Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update	+3
CVE-2016-10735	medium	—	5.5	10y ago	Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update	+3
CVE-2025-1647	unknown	—	—	1y ago	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting (XSS).This issue affects Bootstrap: from 3.4.1 befor…
CVE-2024-6484	unknown	—	—	2y ago	Withdrawn Advisory: Bootstrap Cross-Site Scripting (XSS) vulnerability	+1
CVE-2024-6485	unknown	—	—	2y ago	A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button …
CVE-2018-14041	unknown	—	—	8y ago	In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.	+2