12 matches found
CLSA-2026-1774743845 TuxCare security update for bootstrap-vue (1 CVE)
TuxCare rebuilt bootstrap-vue to address 1 CVE. Fixed in 1.5.1-tuxcare.1...
PT-2026-74196
TuxCare rebuilt bootstrap-vue to address 1 CVE. Fixed in 1.5.1-tuxcare.1...
WS-2019-0161
bootstrap-vue before 2.0.0-rc.12 do not sanitize input sufficiently, components may be vulnerable to Cross-Site Scripting through the options variable...
@bproto/registrar (>=0.0.1-alpha.3, <=0.0.1-alpha.7), @bproto/theme (>=0.0.1-alpha.3, <=0.0.1-alpha.5) +62 more potentially affected by unknown CVE via bootstrap-vue (>=0.10.2, <=2.0.0-rc.28)
bootstrap-vue NPM version =0.10.2, =0.0.1-alpha.3, =0.0.1-alpha.3, =5.11.0, =1.0.191, =0.7.3, =1.0.0, =1.0.0, =1.0.0, =0.0.1-alpha.1, =1.0.1, =1.0.12 and more Source cves: unknown CVE Source advisory: MEND:WS-2019-0161...
Cross-Site Scripting in bootstrap-vue
Versions of bootstrap-vue prior to 2.0.0-rc.12 are vulnerable to Cross-Site Scripting. Due to insufficient input sanitization, components may be vulnerable to Cross-Site Scripting through the options variable. This may lead to the execution of malicious JavaScript on the user's browser...
GHSA-C7PP-X73H-4M2V Cross-Site Scripting in bootstrap-vue
Versions of bootstrap-vue prior to 2.0.0-rc.12 are vulnerable to Cross-Site Scripting. Due to insufficient input sanitization, components may be vulnerable to Cross-Site Scripting through the options variable. This may lead to the execution of malicious JavaScript on the user's browser...
@jojocoders/jojonomic-ui (>=1.0.191, <=2.0.174), mayank-apps (1.1.0) +2 more potentially affected by unknown CVE via bootstrap-vue (>=2.0.0-rc.1, <=2.0.0-rc.9)
bootstrap-vue NPM version =2.0.0-rc.1, =1.0.191, =0.0.2, =0.0.10 Source cves: unknown CVE Source advisory: GHSA-C7PP-X73H-4M2V...
@jojocoders/jojonomic-ui (>=1.0.191, <=2.0.174), mayank-apps (1.1.0) +2 more potentially affected by unknown CVE via bootstrap-vue (>=2.0.0-rc.1, <=2.0.0-rc.9)
bootstrap-vue NPM version =2.0.0-rc.1, =1.0.191, =0.0.2, =0.0.10 Source cves: unknown CVE Source advisory: OSV:GHSA-C7PP-X73H-4M2V...
PT-2020-21231
Name of the Vulnerable Software and Affected Versions bootstrap-vue versions prior to 2.0.0-rc.12 Description The issue is related to insufficient input sanitization, making components vulnerable to Cross-Site Scripting through the options variable. This may lead to the execution of malicious...
frontend
!Build Statushttps://github.com/DependencyTrack/frontend/act...
Cross-Site Scripting (XSS)
bootstrap-vue is vulnerable to cross-site scripting XSS. The option variable is not validated and sanitized, which would allow a remote attacker to inject arbitrary Javascript into a victim's browser to steal session tokens or perform unwanted actions on behalf of the user...
Cross-Site Scripting
Overview Versions of bootstrap-vue prior to 2.0.0-rc.12 are vulnerable to Cross-Site Scripting. Due to insufficient input sanitization, components may be vulnerable to Cross-Site Scripting through the options variable. This may lead to the execution of malicious JavaScript on the user's browser...