CVE-2021-23472

CVE-2021-23472 affects versions before 1.19.1 of the bootstrap-table package. The vulnerability is a type confusion that can bypass input sanitization when escapeHTML receives an array instead of a string, even if escape is enabled. Several connected sources (NVD, OSV, GHSA) corroborate the exist...