npm/bootstrap-select CVE-2019-20921: medium 6.1, EPSS 1.74%
Cross-site scripting in bootstrap-select
Action: Upgrade bootstrap-select to 1.13.6 or later.
npm i bootstrap-select@1.13.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.13.6 | - |
Fixed versions
| 1.13.6 |
Sources
- osv: GHSA-7c82-mp33-r854
- https://nvd.nist.gov/vuln/detail/CVE-2019-20921
- https://github.com/snapappointments/bootstrap-select/issues/2199
- https://github.com/snapappointments/bootstrap-select/commit/ab6e068748040cf3cda5859f6349b382402b8767
- https://github.com/snapappointments/bootstrap-select
- https://issues.jtl-software.de/issues/SHOP-7964
- https://snyk.io/vuln/SNYK-JS-BOOTSTRAPSELECT-570457
CVE-2019-20921 · published · modified · JSON