CVE-2024-6485
1 advisory.
npm/bootstrap CVE-2024-6485: medium 6.4, EPSS 0.49%
Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributes
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.0 | - | 3.4.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-vxmc-5x29-h64v
- https://nvd.nist.gov/vuln/detail/CVE-2024-6485
- https://github.com/twbs/bootstrap
- https://lists.debian.org/debian-lts-announce/2025/04/msg00020.html
- https://www.herodevs.com/vulnerability-directory/cve-2024-6485
CVE-2024-6485 · published · modified · JSON