npm/bootstrap-vue: high
Cross-Site Scripting in bootstrap-vue
Action: Upgrade bootstrap-vue to 2.0.0-rc.12 or later.
npm i bootstrap-vue@2.0.0-rc.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.0-rc.12 | - |
Fixed versions
| 2.0.0-rc.12 |
Sources
- osv: GHSA-c7pp-x73h-4m2v
- https://github.com/bootstrap-vue/bootstrap-vue/issues/1974
- https://github.com/bootstrap-vue/bootstrap-vue/pull/2134
- https://github.com/bootstrap-vue/bootstrap-vue/commit/ba6f3f8359e257589d744f180312c09bf9f12289
- https://github.com/bootstrap-vue/bootstrap-vue
- https://www.npmjs.com/advisories/770
published · modified · JSON