AZL-13232 CVE-2018-14040 affecting package reaper for versions less than 3.1.1-1

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...