Malicious Package

Overview vite-postcss-bootstrap is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

GHSA-H4J7-5RXR-P4WC vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2025-26646 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

GHSA-H4J7-5RXR-P4WC vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2025-26646 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

VulnCheck KEV: CVE-2025-47204

An issue was discovered in post.php in bootstrap-multiselect aka Bootstrap Multiselect 1.1.2. A PHP script in the source code echoes arbitrary POST data. If a developer adopts this structure wholesale in a live application, it could create a Reflective Cross-Site Scripting XSS vulnerability...

Optimal Debiased Inference on Privatized Data Via Indirect Estimation and Parametric Bootstrap

We design a debiased parametric bootstrap framework for statistical inference from differentially private data. Existing usage of the parametric bootstrap on privatized data ignored or avoided handling the effect of clamping, a technique employed by the majority of privacy mechanisms. Ignoring th...

GHSA-266M-WP2V-X7MQ vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2025-30399 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

GHSA-266M-WP2V-X7MQ vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2025-30399 vulnerabilities

Vulnerabilities for packages: dotnet-bootstrap...

CVE-2024-25710 affecting package javapackages-bootstrap for versions less than 1.14.0-2

CVE-2024-25710 affecting package javapackages-bootstrap for versions less than 1.14.0-2. A patched version of the package is available...

CVE-2023-7008 affecting package systemd-bootstrap for versions less than 250.3-13

CVE-2023-7008 affecting package systemd-bootstrap for versions less than 250.3-13. A patched version of the package is available...

Bootstrap 4.x <= 4.6.2 Cross-Site Scripting

According to its self-reported version number, Bootstrap is 4.x prior 4.6.2 . Therefore, it may be affected by a Cross-Site Scripting XSS vulnerability within the Carousel component. Note that the scanner has not tested for these issues but has instead relied only on the application's self-report...

Bootstrap 3.2.x <= 3.4.1 Cross-Site Scripting

According to its self-reported version number, Bootstrap is 3.2.x prior 3.4.1 . Therefore, it may be affected by a Cross-Site Scripting XSS vulnerability within the Carousel component. Note that the scanner has not tested for these issues but has instead relied only on the application's...

Bootstrap Unsupported Version

The installation of Boostrap detected on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. No source data...

OPENSUSE-SU-2025:15240-1 libQt5Bootstrap-devel-static-32bit-5.15.17+kde122-2.1 on GA media

These are all security issues fixed in the libQt5Bootstrap-devel-static-32bit-5.15.17+kde122-2.1 package on the GA media of openSUSE Tumbleweed...

Bootstrap < 4.0.0 Multiples Cross-Site Scripting

According to its self-reported version number, Bootstrap is prior to 4.0.0. Therefore, it may be affected by Multiples Cross-Site Scripting XSS vulnerability : - A Cross-Site Scripting XSS vulnerability has been identified within the Bootstrap 3 Button component. - A Cross-Site Scripting XSS...

Conjure Position Department Service Quality Evaluation System 安全漏洞

Conjure Position Department Service Quality Evaluation System is a position department service quality evaluation system from China Star Space Conjure. A security vulnerability exists in Conjure Position Department Service Quality Evaluation System version 1.0.11 and earlier versions, which...

MAL-2025-5370 Malicious code in bootstrap-modules (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a45d845a42d64eb0f9732d82ec558f52eed95f2e905ffec7f0ae2849f78104e1 Any computer that has this package installed or running should be considered...