npm/bootstrap-select CVE-2019-20921: medium 6.1, EPSS 1.74%
Cross-Site Scripting in bootstrap-select
Action: Upgrade bootstrap-select to 1.13.6 or later.
npm i bootstrap-select@1.13.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.13.6 | - |
Fixed versions
| 1.13.6 |
Sources
- osv: GHSA-9r7h-6639-v5mw
- nvd: CVE-2019-20921
- https://github.com/dimpu/ngx-md/issues/129
- https://github.com/snapappointments/bootstrap-select/issues/2199
- https://github.com/snapappointments/bootstrap-select
- https://www.npmjs.com/advisories/1522
CVE-2019-20921 · published · modified · JSON