2.23.1
9 years ago
3 years ago
Known vulnerabilities in the bootstrap-vue package. This does not include vulnerabilities belonging to this package’s dependencies.
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
bootstrap-vue provides one of the most comprehensive implementations of Bootstrap 4 components and grid system for Vue.js and with extensive and automated WAI-ARIA accessibility markup. Affected versions of this package are vulnerable to Cross-site Scripting (XSS). Insufficient input sanitisation and escaping may lead to the execution of malicious JavaScript on the user's browser. How to fix Cross-site Scripting (XSS)? Upgrade | <2.0.0-rc.12 |