DRUPAL-CONTRIB-2026-236

Provides the Bootstrap front-end framework as a Drupal theme. Bootstrap theme did not sufficiently filter certain attributes, which could lead to a cross-site scripting vulnerability. This vulnerability is mitigated by only affecting the optional tooltip and popover features. A short-term...

PT-2026-120913

Provides the Bootstrap front-end framework as a Drupal theme. Bootstrap theme did not sufficiently filter certain attributes, which could lead to a cross-site scripting vulnerability. This vulnerability is mitigated by only affecting the optional tooltip and popover features. A short-term...

@addaps/doca-addaps-theme (>=1.0.1, <=1.0.6), doca-bootstrap-theme (>=0.0.6, <=1.0.0) +11 more potentially affected by unknown CVE via react-marked-markdown (1.4.6)

react-marked-markdown NPM version 1.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on react-marked-markdown and may be impacted: - @addaps/doca-addaps-theme =1.0.1, =0.0.6, =0.0.1, =0.2.1, =1.0.0, =0.0.1, =1.0.0, =0.1.1, =0.15.1, =0.1.2, =0.2.1 Sourc...

Drupal Flattern security vulnerability

Drupal Flattern is a Bootstrap-based responsive theme for the Drupal community that provides a clean, modern front-end design for Drupal websites, commonly used for enterprise sites and blogs. A security vulnerability exists in Drupal Flattern, which stems from the presence of a known security...

Malware in samples-bootstrap-theme

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in samples-bootstrap-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03a7a684dc17823d5e5581fe85fe43261a947901f2f2afb4820f5815198cb572 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5922 Malicious code in samples-bootstrap-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03a7a684dc17823d5e5581fe85fe43261a947901f2f2afb4820f5815198cb572 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...