An open index of dependabot pull requests across open source projects.

bootstrap

Ecosystem:
npm
Package URL:
pkg:npm/bootstrap
Total PRs:
4,079 Dependabot PRs
Latest PR:
about 13 hours ago
Unique Repositories:
2,144 repositories
Unique Repos (30 days):
11 repositories
Security Advisories
Bootstrap Cross-site Scripting vulnerability
GHSA-4p24-vmcr-4gqj CVE-2016-10735 MODERATE published about 7 years ago • updated about 24 hours ago
In Bootstrap 2.x from 2.0.4, 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute. Note that this is a d...
Bootstrap Vulnerable to Cross-Site Scripting
GHSA-9v3m-8fp8-mj99 CVE-2019-8331 MODERATE published almost 7 years ago • updated about 22 hours ago
Versions of `bootstrap` prior to 3.4.1 for 3.x and 4.3.1 for 4.x are vulnerable to Cross-Site Scripting (XSS). The `data-template` attribute of th...
Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributes
GHSA-vxmc-5x29-h64v CVE-2024-6485 MODERATE published over 1 year ago • updated about 16 hours ago
A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated wit...
Moderate severity vulnerability that affects bootstrap and bootstrap-sass
GHSA-wh77-3x4m-4q9g CVE-2019-8331 MODERATE published almost 7 years ago • updated 5 days ago
In Bootstrap 4 before 4.3.1 and Bootstrap 3 before 3.4.1, XSS is possible in the tooltip or popover data-template attribute. For more information, ...
Bootstrap Cross-site Scripting vulnerability
GHSA-7mvr-5x2g-wfc8 CVE-2018-14042 MODERATE published over 7 years ago • updated about 24 hours ago
In Bootstrap starting in version 2.3.0 and prior to versions 3.4.0 and 4.1.2, XSS is possible in the data-container property of tooltip. This is s...
Recent PRs
Bump bootstrap from 5.3.6 to 5.3.8

manyfold3d/manyfold #5207

5.3.6 → 5.3.8 Patch PR
Open about 1 month ago 2 comments
manyfold3d
Bump bootstrap from 5.1.3 to 5.3.8

RMITLibrary/rmit-ui #329

5.1.3 → 5.3.8 Minor PR
Closed about 2 months ago 3 comments
RMITLibrary
Package Details
Name: bootstrap
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/bootstrap
JSON API: View JSON
Security Advisories

10

Active advisories
MODERATE 10
View All npm Advisories
Package Information
Description:

The most popular front-end framework for developing responsive, mobile first projects on the web.

Repository: https://github.com/twbs/bootstrap
Homepage: https://getbootstrap.com/
Latest Release: 5.3.6
9 months ago
Dependent Repos: 874,564
Dependent Packages: 17,952
Downloads: 20,752,506
Ranking: Top 0.0383% by dependent repos Top 0.0595% by downloads Top 0.0059% by dependent pkgs
PR Status
Open 1,996 (48.9%)
Merged 780 (19.1%)
Closed 920 (22.6%)
PR Types
Removal 2 (0.0%)
Minor 332 (8.1%)
Major 824 (20.2%)
Patch 2,536 (62.2%)