CLSA-2026-1774743845 TuxCare security update for bootstrap-vue (1 CVE)

TuxCare rebuilt bootstrap-vue to address 1 CVE. Fixed in 1.5.1-tuxcare.1...

PT-2026-74196

TuxCare rebuilt bootstrap-vue to address 1 CVE. Fixed in 1.5.1-tuxcare.1...

WS-2019-0161

bootstrap-vue before 2.0.0-rc.12 do not sanitize input sufficiently, components may be vulnerable to Cross-Site Scripting through the options variable...

Cross-Site Scripting in bootstrap-vue

Versions of bootstrap-vue prior to 2.0.0-rc.12 are vulnerable to Cross-Site Scripting. Due to insufficient input sanitization, components may be vulnerable to Cross-Site Scripting through the options variable. This may lead to the execution of malicious JavaScript on the user's browser...

GHSA-C7PP-X73H-4M2V Cross-Site Scripting in bootstrap-vue

Versions of bootstrap-vue prior to 2.0.0-rc.12 are vulnerable to Cross-Site Scripting. Due to insufficient input sanitization, components may be vulnerable to Cross-Site Scripting through the options variable. This may lead to the execution of malicious JavaScript on the user's browser...

PT-2020-21231

Name of the Vulnerable Software and Affected Versions bootstrap-vue versions prior to 2.0.0-rc.12 Description The issue is related to insufficient input sanitization, making components vulnerable to Cross-Site Scripting through the options variable. This may lead to the execution of malicious...

frontend

!Build Statushttps://github.com/DependencyTrack/frontend/act...

Cross-Site Scripting (XSS)

bootstrap-vue is vulnerable to cross-site scripting XSS. The option variable is not validated and sanitized, which would allow a remote attacker to inject arbitrary Javascript into a victim's browser to steal session tokens or perform unwanted actions on behalf of the user...

Cross-Site Scripting

Overview Versions of bootstrap-vue prior to 2.0.0-rc.12 are vulnerable to Cross-Site Scripting. Due to insufficient input sanitization, components may be vulnerable to Cross-Site Scripting through the options variable. This may lead to the execution of malicious JavaScript on the user's browser...