CVE-2021-21365
1 advisory.
Packagist/bk2k/bootstrap-package CVE-2021-21365: medium 5.4, EPSS 0.94%
Cross-Site Scripting in Bootstrap Package
Action: Upgrade bk2k/bootstrap-package to 7.1.2 or later.
composer require bk2k/bootstrap-package:7.1.2composer require bk2k/bootstrap-package:8.0.8composer require bk2k/bootstrap-package:9.0.4composer require bk2k/bootstrap-package:9.1.3composer require bk2k/bootstrap-package:10.0.10composer require bk2k/bootstrap-package:11.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.1.0 | 7.1.2 | - |
| 8.0.0 | 8.0.8 | - |
| 9.0.0 | 9.0.4 | - |
| 9.1.0 | 9.1.3 | - |
| 10.0.0 | 10.0.10 | - |
| 11.0.0 | 11.0.3 | - |
Fixed versions
| 7.1.2 | 8.0.8 | 9.0.4 | 9.1.3 | 10.0.10 | 11.0.3 |
Sources
- osv: GHSA-p48w-vf3c-rqjx
- https://github.com/benjaminkott/bootstrap_package/security/advisories/GHSA-p48w-vf3c-rqjx
- https://nvd.nist.gov/vuln/detail/CVE-2021-21365
- https://github.com/benjaminkott/bootstrap_package/commit/de3a568fc311d6712d9339643e51e8627c80530b
- https://typo3.org/security/advisory/typo3-ext-sa-2021-007
CVE-2021-21365 · published · modified · JSON