AZL-44586 CVE-2019-11358 affecting package python-openstackdocstheme 3.0.0-9

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extendtrue, , ... because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype...

AZL-44094 CVE-2018-14042 affecting package python-openstackdocstheme 3.0.0-9

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...

AZL-43750 CVE-2018-14040 affecting package python-openstackdocstheme 1.29.0-8

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...