CVE-2022-31321

The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation, allowing attackers to perform directory enumeration or cause a Denial of Service DoS via a crafted input...

Reflected Cross-site Scripting (XSS)

bolt/bolt is vulnerable to reflected cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary web script when generating canonical links...