01.webpack-study (1.0.0), 0226 (1.0.0) +3320 more potentially affected by CVE-2024-6485 via bootstrap (>=3.1.1, <=3.4.1)

🗓️ 11 Jul 2024 18:31:14Reported by Vulners OSVType

vulnersosv🔗 osv.dev👁 5 Views

Bootstrap >=3.1.1 <=3.4.1 vulnerable to XSS via CVE-2024-6485 affecting 3320+ transitive NPM packages.

Reporter	Title	Published	Views	Family All 99
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities in bootstrap-3.4.1.tgz client library	11 Aug 202608:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	19 Dec 202416:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	30 Jan 202617:20	–	ibm
IBM Security Bulletins	Security Bulletin: Cross-Site Scripting (XSS) Vulnerability in data-target Attribute Handling in Bootstrap, affects watsonx.data	7 Apr 202611:00	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of bootstrap, IBM License Key Server Administration and Reporting Tool is affected by Cross-site scripting	2 Sep 202605:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities bootstrap-3.4.1.tgz observed	19 Jun 202614:26	–	ibm
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Management GUI and/or BDA are now included.	2 Mar 202623:03	–	ibm
AstraLinux	Astra Linux – Vulnerability in twitter-bootstrap3	24 Aug 202610:19	–	astralinux
CBLMariner	CVE-2024-6485 affecting package reaper for versions less than 3.1.1-22	7 Jan 202619:09	–	cbl_mariner

04 Feb 2026 03:03Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16.4

EPSS0.00494

SSVC

bootstrap XSS CVE-2024-6485 transitive dependency NPM package alert()DOM clobbering