https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 17:23:05 +0000 https://cve.radiocsirt.org/vuln/cve-2019-8331 <p>In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.</p> <p>In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.</p> https://cve.radiocsirt.org/vuln/cve-2019-8331 https://cve.radiocsirt.org/vuln/ghsa-9v3m-8fp8-mj99 <p><strong>Affected:</strong> RubyGems: bootstrap, RubyGems: bootstrap-sass, NuGet: Bootstrap.Less, NuGet: bootstrap, NuGet: bootstrap.sass, npm: bootstrap, npm: bootstrap-sass, RubyGems: twitter-bootstrap-rails, Maven: org.webjars:bootstrap, Packagist: twbs/bootstrap</p> <p>Versions of `bootstrap` prior to 3.4.1 for 3.x and 4.3.1 for 4.x are vulnerable to Cross-Site Scripting (XSS). The `data-template` attribute of the tooltip and popover plugins lacks input sanitization and may allow attacker to execute arbitrary JavaScript.</p> <p>## Recommendation</p> <p>For `bootstrap` 4.x upgrade to 4.3.1 or later. For `bootstrap` 3.x upgrade to 3.4.1 or later.</p> <p><strong>Affected:</strong> RubyGems: bootstrap, RubyGems: bootstrap-sass, NuGet: Bootstrap.Less, NuGet: bootstrap, NuGet: bootstrap.sass, npm: bootstrap, npm: bootstrap-sass, RubyGems: twitter-bootstrap-rails, Maven: org.webjars:bootstrap, Packagist: twbs/bootstrap</p> <p>Versions of `bootstrap` prior to 3.4.1 for 3.x and 4.3.1 for 4.x are vulnerable to Cross-Site Scripting (XSS). The `data-template` attribute of the tooltip and popover plugins lacks input sanitization and may allow attacker to execute arbitrary JavaScript.</p> <p>## Recommendation</p> <p>For `bootstrap` 4.x upgrade to 4.3.1 or later. For `bootstrap` 3.x upgrade to 3.4.1 or later.</p> https://cve.radiocsirt.org/vuln/ghsa-9v3m-8fp8-mj99