Homepage
About Snyk

bootstrap-vue@0.20.0 vulnerabilities

With more than 85 components, over 45 available plugins, several directives, and 1000+ icons, BootstrapVue provides one of the most comprehensive implementations of the Bootstrap v4 component and grid system available for Vue.js v2.6, complete with extens

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the bootstrap-vue package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Cross-site Scripting (XSS)

bootstrap-vue provides one of the most comprehensive implementations of Bootstrap 4 components and grid system for Vue.js and with extensive and automated WAI-ARIA accessibility markup.

Affected versions of this package are vulnerable to Cross-site Scripting (XSS). Insufficient input sanitisation and escaping may lead to the execution of malicious JavaScript on the user's browser.

How to fix Cross-site Scripting (XSS)?

Upgrade bootstrap-vue to version 2.0.0-rc.12 or higher.

<2.0.0-rc.12
Go back to all versions of this package