Lucene search
+L

196 matches found

OSV
OSV
•added 2025/08/14 6:52 p.m.•11 views

MAL-2025-31770 Malicious code in react-bootstrap-prettier-stylelint-parsec-mechatronics (npm)

The package react-bootstrap-prettier-stylelint-parsec-mechatronics was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/08/07 11:58 p.m.•9 views

Malicious code in react-bs4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78bc438299611b89dd8a16ca1b19661e9606898bbc7c61bebd4bfd59fe8c3134 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:11 p.m.•15 views

Malicious code in ps-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c99c8315c3edd20e2322aa14237ecde5a97bc740f633f94d73bb92bfa87bf39d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:11 p.m.•24 views

MAL-2022-5502 Malicious code in ps-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c99c8315c3edd20e2322aa14237ecde5a97bc740f633f94d73bb92bfa87bf39d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2021/12/10 6:58 p.m.•106 views

Cross-site scripting in react-bootstrap-table

All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting XSS via the dataFormat parameter. The problem is triggered when an invalid React element is returned, leading to dangerouslySetInnerHTML being used, which does not sanitize the output...

6.1CVSS2.4AI score0.01341EPSS
SaveExploits1References6Affected Software1
vulnersOsv
vulnersOsv
•added 2021/12/10 6:58 p.m.•6 views

@attivio/suit (>=0.0.47, <=1.0.7), @botxo_team/fe-shared (>=1.0.0, <=1.15.29) +44 more potentially affected by CVE-2021-23398 via react-bootstrap-table (>=4.0.6, <=4.3.1)

react-bootstrap-table NPM version =4.0.6, =0.0.47, =1.0.0, =0.3.1, =0.1.1, =1.21.0, =0.15.0-beta-1, =1.14.3, =1.0.1, =0.1.0, =2.0.0 - bs-table-fg2 1.0.0 - censadesignsystem 2.38.0 - chainofdemand 0.1.0 and more Source cves: CVE-2021-23398 Source advisory: OSV:GHSA-2589-W6XF-983R...

6.1CVSS6.2AI score0.01341EPSS
SaveExploits1
OSV
OSV
•added 2021/12/10 6:58 p.m.•54 views

GHSA-2589-W6XF-983R Cross-site scripting in react-bootstrap-table

All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting XSS via the dataFormat parameter. The problem is triggered when an invalid React element is returned, leading to dangerouslySetInnerHTML being used, which does not sanitize the output...

6.1CVSS5.9AI score0.01341EPSS
SaveExploits1References5
IBM Security Bulletins
IBM Security Bulletins
•added 2021/10/22 4:31 p.m.•40 views

Security Bulletin: Vulnerabilities in Urllib3 and react-bootstrap-table affect IBM Spectrum Discover.

Summary Vulnerabilities in Urllib3 and react-bootstrap-table such as problems on the regular expression cause denial of service, improper validations in parameters and problems related to cross-site scripting, may affect IBM Spectrum Discover. Vulnerability Details CVEID: CVE-2021-33503...

7.5CVSS2AI score0.03273EPSS
SaveExploits1Affected Software1
OSV
OSV
•added 2021/06/24 3:15 p.m.•22 views

CVE-2021-23398

All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting XSS via the dataFormat parameter. The problem is triggered when an invalid React element is returned, leading to dangerouslySetInnerHTML being used, which does not sanitize the output...

6.1CVSS6.4AI score0.01341EPSS
SaveExploits1References4
NVD
NVD
•added 2021/06/24 3:15 p.m.•42 views

CVE-2021-23398

All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting XSS via the dataFormat parameter. The problem is triggered when an invalid React element is returned, leading to dangerouslySetInnerHTML being used, which does not sanitize the output...

6.1CVSS0.01341EPSS
SaveExploits1References4
Mend
Mend
•added 2021/06/24 3:00 p.m.•4 views

CVE-2021-23398

All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting XSS via the dataFormat parameter. The problem is triggered when an invalid React element is returned, leading to dangerouslySetInnerHTML being used, which does not sanitize the output...

6.1CVSS0.01341EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2021/06/24 3:00 p.m.•45 views

CVE-2021-23398 Cross-site Scripting (XSS)

All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting XSS via the dataFormat parameter. The problem is triggered when an invalid React element is returned, leading to dangerouslySetInnerHTML being used, which does not sanitize the output...

6.1CVSS6.2AI score0.01341EPSS
SaveExploits1References4
CVE
CVE
•added 2021/06/24 3:00 p.m.•134 views

CVE-2021-23398

CVE-2021-23398 affects the React Bootstrap Table package. The vulnerability arises from improper validation of user input in the dataFormat parameter, triggering dangerouslySetInnerHTML when an invalid React element is returned, leading to a cross-site scripting (XSS) risk. Public documents descr...

6.1CVSS6.1AI score0.01341EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2021/06/24 12:00 a.m.•2 views

PT-2021-15490

Name of the Vulnerable Software and Affected Versions react-bootstrap-table versions all versions Description The issue is related to Cross-site Scripting XSS via the dataFormat parameter. It occurs when an invalid React element is returned, causing dangerouslySetInnerHTML to be used without prop...

6.1CVSS0.01341EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2021/06/24 12:00 a.m.•22 views

react-bootstrap-table 跨站脚本漏洞

react-bootstrap-table is a package. It is a Bootstrap table built using React.js. A cross-site scripting vulnerability exists in package react-bootstrap-table, which stems from an issue that is triggered when an invalid React element is returned, resulting in the use of dangerous setinnerhtml,...

6.1CVSS5.9AI score0.01341EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/24 12:00 a.m.•7 views

CVE-2021-23398: Improper Neutralization of Input During Web Page Generation

All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting XSS via the dataFormat parameter. The problem is triggered when an invalid React element is returned, leading to dangerouslySetInnerHTML being used, which does not sanitize the output...

6.1CVSS5.7AI score0.01341EPSS
SaveExploits1References2
Rows per page
Query Builder