241 matches found
Malicious code in carpo-nodejs-react-bootstrap-hyperion (npm)
The package carpo-nodejs-react-bootstrap-hyperion was found to contain malicious code...
Malicious code in configstore-cluster-cors-react-bootstrap (npm)
The package configstore-cluster-cors-react-bootstrap was found to contain malicious code...
Malicious code in dorado-aldebaran-hermes-react-bootstrap (npm)
The package dorado-aldebaran-hermes-react-bootstrap was found to contain malicious code...
Malicious code in supercluster-sass-loader-cosmos-react-bootstrap (npm)
The package supercluster-sass-loader-cosmos-react-bootstrap was found to contain malicious code...
Malicious code in react-bs4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78bc438299611b89dd8a16ca1b19661e9606898bbc7c61bebd4bfd59fe8c3134 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5502 Malicious code in ps-react-bootstrap (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c99c8315c3edd20e2322aa14237ecde5a97bc740f633f94d73bb92bfa87bf39d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in ps-react-bootstrap
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in ps-react-bootstrap (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c99c8315c3edd20e2322aa14237ecde5a97bc740f633f94d73bb92bfa87bf39d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
@attivio/suit (>=0.0.47, <=1.0.7), @botxo_team/fe-shared (>=1.0.0, <=1.15.29) +44 more potentially affected by CVE-2021-23398 via react-bootstrap-table (>=4.0.6, <=4.3.1)
react-bootstrap-table NPM version =4.0.6, =0.0.47, =1.0.0, =0.3.1, =0.1.1, =1.21.0, =0.15.0-beta-1, =1.14.3, =1.0.1, =0.1.0, =2.0.0 - bs-table-fg2 1.0.0 - censadesignsystem 2.38.0 - chainofdemand 0.1.0 and more Source cves: CVE-2021-23398 Source advisory: OSV:GHSA-2589-W6XF-983R...
GHSA-2589-W6XF-983R Cross-site scripting in react-bootstrap-table
All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting XSS via the dataFormat parameter. The problem is triggered when an invalid React element is returned, leading to dangerouslySetInnerHTML being used, which does not sanitize the output...
Cross-site scripting in react-bootstrap-table
All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting XSS via the dataFormat parameter. The problem is triggered when an invalid React element is returned, leading to dangerouslySetInnerHTML being used, which does not sanitize the output...
@attivio/suit (>=0.0.47, <=1.0.7), @botxo_team/fe-shared (>=1.0.0, <=1.15.29) +44 more potentially affected by CVE-2021-23398 via react-bootstrap-table (>=4.0.6, <=4.3.1)
react-bootstrap-table NPM version =4.0.6, =0.0.47, =1.0.0, =0.3.1, =0.1.1, =1.21.0, =0.15.0-beta-1, =1.14.3, =1.0.1, =0.1.0, =2.0.0 - bs-table-fg2 1.0.0 - censadesignsystem 2.38.0 - chainofdemand 0.1.0 and more Source cves: CVE-2021-23398 Source advisory: GHSA-2589-W6XF-983R...
Security Bulletin: Vulnerabilities in Urllib3 and react-bootstrap-table affect IBM Spectrum Discover.
Summary Vulnerabilities in Urllib3 and react-bootstrap-table such as problems on the regular expression cause denial of service, improper validations in parameters and problems related to cross-site scripting, may affect IBM Spectrum Discover. Vulnerability Details CVEID: CVE-2021-33503...
CVE-2021-23398
All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting XSS via the dataFormat parameter. The problem is triggered when an invalid React element is returned, leading to dangerouslySetInnerHTML being used, which does not sanitize the output...
CVE-2021-23398
All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting XSS via the dataFormat parameter. The problem is triggered when an invalid React element is returned, leading to dangerouslySetInnerHTML being used, which does not sanitize the output...
CVE-2021-23398 Cross-site Scripting (XSS)
All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting XSS via the dataFormat parameter. The problem is triggered when an invalid React element is returned, leading to dangerouslySetInnerHTML being used, which does not sanitize the output...
CVE-2021-23398
CVE-2021-23398 affects the React Bootstrap Table package. The vulnerability arises from improper validation of user input in the dataFormat parameter, triggering dangerouslySetInnerHTML when an invalid React element is returned, leading to a cross-site scripting (XSS) risk. Public documents descr...
CVE-2021-23398
All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting XSS via the dataFormat parameter. The problem is triggered when an invalid React element is returned, leading to dangerouslySetInnerHTML being used, which does not sanitize the output...
CVE-2021-23398: Improper Neutralization of Input During Web Page Generation
All versions of package react-bootstrap-table are vulnerable to Cross-site Scripting XSS via the dataFormat parameter. The problem is triggered when an invalid React element is returned, leading to dangerouslySetInnerHTML being used, which does not sanitize the output...
PT-2021-15490
Name of the Vulnerable Software and Affected Versions react-bootstrap-table versions all versions Description The issue is related to Cross-site Scripting XSS via the dataFormat parameter. It occurs when an invalid React element is returned, causing dangerouslySetInnerHTML to be used without prop...