bootstrap-vue@0.15.6 vulnerabilities
With more than 85 components, over 45 available plugins, several directives, and 1000+ icons, BootstrapVue provides one of the most comprehensive implementations of the Bootstrap v4 component and grid system available for Vue.js v2.6, complete with extens
latest version
2.23.1
latest non vulnerable version
first published
8 years ago
latest version published
2 years ago
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the bootstrap-vue package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
bootstrap-vue provides one of the most comprehensive implementations of Bootstrap 4 components and grid system for Vue.js and with extensive and automated WAI-ARIA accessibility markup. Affected versions of this package are vulnerable to Cross-site Scripting (XSS). Insufficient input sanitisation and escaping may lead to the execution of malicious JavaScript on the user's browser. How to fix Cross-site Scripting (XSS)? Upgrade | <2.0.0-rc.12 |