bootstrap-vue@0.3.1 vulnerabilities

With more than 85 components, over 45 available plugins, several directives, and 1000+ icons, BootstrapVue provides one of the most comprehensive implementations of the Bootstrap v4 component and grid system available for Vue.js v2.6, complete with extens

  • latest version

    2.23.1

  • latest non vulnerable version

  • first published

    8 years ago

  • latest version published

    2 years ago

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the bootstrap-vue package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Cross-site Scripting (XSS)

    bootstrap-vue provides one of the most comprehensive implementations of Bootstrap 4 components and grid system for Vue.js and with extensive and automated WAI-ARIA accessibility markup.

    Affected versions of this package are vulnerable to Cross-site Scripting (XSS). Insufficient input sanitisation and escaping may lead to the execution of malicious JavaScript on the user's browser.

    How to fix Cross-site Scripting (XSS)?

    Upgrade bootstrap-vue to version 2.0.0-rc.12 or higher.

    <2.0.0-rc.12