`bootstrap`

Ecosystem:
npm

Package URL:
pkg:npm/bootstrap

Total PRs:
4,161 Dependabot PRs

Latest PR:
1 day ago

Unique Repositories:
2,194 repositories

Unique Repos (30 days):
4 repositories

Security Advisories

Bootstrap Cross-site Scripting vulnerability

GHSA-7mvr-5x2g-wfc8 CVE-2018-14042 MODERATE published almost 8 years ago • updated about 3 hours ago

In Bootstrap starting in version 2.3.0 and prior to versions 3.4.0 and 4.1.2, XSS is possible in the data-container property of tooltip. This is s...

Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip Components

GHSA-q58r-hwc8-rm9j CVE-2025-1647 MODERATE published about 1 year ago • updated 22 days ago

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting ...

XSS vulnerability that affects bootstrap

GHSA-3mgp-fx93-9xv5 CVE-2018-20676 MODERATE published over 7 years ago • updated about 3 hours ago

In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.

Bootstrap Cross-site Scripting vulnerability

GHSA-pj7m-g53m-7638 CVE-2018-14041 MODERATE published almost 8 years ago • updated about 3 hours ago

In Bootstrap 4.x before 4.1.2, XSS is possible in the data-target property of scrollspy. This is similar to CVE-2018-14042.

Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributes

GHSA-vxmc-5x29-h64v CVE-2024-6485 MODERATE published almost 2 years ago • updated 9 days ago

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated wit...

View all 10 advisories

Recent PRs (filtered by: Closed , Patch PRs )

RSS Feed Clear filter

chore(deps): bump the npm-minor group across 1 directory with 20 updates

Dashtid/portfolio-site #93

5.3.3 → 5.3.8 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump the npm-minor group across 1 directory with 16 updates

Dashtid/portfolio-site #83

5.3.3 → 5.3.8 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump the all-dependencies group with 30 updates

amigobrewbrew/polytopiacalculatorfirebase-public #112

5.3.5 → 5.3.8 Patch PR

Closed 3 months ago 1 comment

Bump bootstrap from 5.3.0-alpha1 to 5.3.8 in /tabby-core

xiaoyu-work/ATerm #10

5.3.0-alpha1 → 5.3.8 Patch PR

Closed 4 months ago 2 comments

Bump bootstrap from 5.3.0 to 5.3.8

ahmad-ali-kamal/Smart_Inventory_Product_Calculator_App #6

5.3.0 → 5.3.8 Patch PR

Closed 4 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 80 updates

craftercms/studio-ui #4775

5.3.7 → 5.3.8 Patch PR

Closed 5 months ago 2 comments

Bump the all-ui-deps group across 1 directory with 79 updates

craftercms/studio-ui #4770

5.3.7 → 5.3.8 Patch PR

Closed 5 months ago 2 comments

Bump the frontend-production group across 1 directory with 21 updates

crt25/collimator #462

5.3.3 → 5.3.8 Patch PR

Closed 5 months ago 2 comments

Bump the all-ui-deps group across 1 directory with 77 updates

craftercms/studio-ui #4765

5.3.7 → 5.3.8 Patch PR

Closed 5 months ago 2 comments

Bump the all-ui-deps group across 1 directory with 76 updates

craftercms/studio-ui #4760

5.3.7 → 5.3.8 Patch PR

Closed 5 months ago 2 comments

Bump the npm-dependencies group across 1 directory with 27 updates

SamYuan1990/Probe #270

5.3.3 → 5.3.8 Patch PR

Closed 5 months ago 1 comment

Bump the frontend-production group across 1 directory with 19 updates

crt25/collimator #454

5.3.3 → 5.3.8 Patch PR

Closed 5 months ago 1 comment

Bump the patterns group across 1 directory with 29 updates

Metaller000/mongo-express #36

5.3.3 → 5.3.8 Patch PR

Closed 5 months ago 1 comment

Bump the all-patch-minor group across 1 directory with 109 updates

eddelbuettel/PrairieLearn #1569

5.3.6 → 5.3.8 Patch PR

Closed 6 months ago 1 comment

chore(deps): bump bootstrap from 5.3.3 to 5.3.8 in the production-dependencies group

mpbarbosa/monitora_vagas #14

5.3.3 → 5.3.8 Patch PR

Closed 6 months ago 2 comments

Bump the development-dependencies group across 1 directory with 10 updates

gifhuppp/icons #159

5.3.7 → 5.3.8 Patch PR

Closed 7 months ago 1 comment

Bump the jsx-minor group across 1 directory with 9 updates

zheme1024/jupyterhub #17

5.3.6 → 5.3.8 Patch PR

Closed 7 months ago 1 comment

NPM-dependencies: Bump the npm-updates group across 3 directories with 16 updates

Harvester57/keysas #22

5.3.5 → 5.3.8 Patch PR

Closed 7 months ago 1 comment

fix(deps): bump the minorandpatch group with 35 updates

authup/authup #2751

5.3.7 → 5.3.8 Patch PR

Closed 7 months ago 3 comments

deps(deps-dev): bump bootstrap from 5.3.5 to 5.3.8 in /Mwh.Sample.Web

markhazleton/SampleMvcCRUD #41

5.3.5 → 5.3.8 Patch PR

Closed 7 months ago 5 comments

Bump the all-npm group across 1 directory with 21 updates

sakamata-ch/SakamataFontProject-Website #151

5.3.3 → 5.3.8 Patch PR

Closed 7 months ago 4 comments

chore(deps-dev): bump the development-dependencies group across 1 directory with 32 updates

LouisBarranqueiro/reapop #582

5.3.7 → 5.3.8 Patch PR

Closed 8 months ago 1 comment

fix(deps): bump the minorandpatch group across 1 directory with 17 updates

dnpm-dip/portal #1119

5.3.7 → 5.3.8 Patch PR

Closed 8 months ago 1 comment

build(deps): bump the minor-and-patch group across 1 directory with 9 updates

CircuitVerse/CircuitVerse #6317

5.3.3 → 5.3.8 Patch PR

Closed 8 months ago 3 comments

chore(deps-dev): Bump the node-dependencies group across 1 directory with 13 updates

peasee/roll #62

5.3.7 → 5.3.8 Patch PR

Closed 8 months ago 1 comment

Bump the npm group across 1 directory with 8 updates

THE-BWC/opserv #238

5.3.7 → 5.3.8 Patch PR

Closed 8 months ago 1 comment

build(deps-dev): bump the minorandpatch group across 1 directory with 12 updates

dnpm-dip/portal #1114

5.3.7 → 5.3.8 Patch PR

Closed 8 months ago 1 comment

Bump the js-production-dependencies group across 1 directory with 66 updates

texpert/rails_6_rss_reader #5239

5.3.7 → 5.3.8 Patch PR

Closed 8 months ago 1 comment

chore(deps-dev): Bump the node-dependencies group across 1 directory with 12 updates

peasee/roll #61

5.3.7 → 5.3.8 Patch PR

Closed 8 months ago 1 comment

Bump the patterns group across 1 directory with 29 updates

Metaller000/mongo-express #31

5.3.3 → 5.3.8 Patch PR

Closed 8 months ago 1 comment

Bump the all-updates group with 21 updates

brandonladen/My_Digital_Portfolio #15

5.3.6 → 5.3.8 Patch PR

Closed 8 months ago 1 comment

Bump the version-bumps group across 1 directory with 20 updates

warp-tech/warpgate #1531

5.3.7 → 5.3.8 Patch PR

Closed 8 months ago 1 comment

fix(deps): bump the minorandpatch group across 1 directory with 16 updates

tada5hi/vuecs #1454

5.3.5 → 5.3.8 Patch PR

Closed 8 months ago 1 comment

fix(deps): bump the minorandpatch group across 1 directory with 15 updates

tada5hi/vuecs #1453

5.3.5 → 5.3.8 Patch PR

Closed 8 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 64 updates

craftercms/studio-ui #4678

5.3.7 → 5.3.8 Patch PR

Closed 8 months ago 2 comments

Bump the js-production-dependencies group across 1 directory with 67 updates

texpert/rails_6_rss_reader #5228

5.3.7 → 5.3.8 Patch PR

Closed 8 months ago 2 comments

Bump the js-production-dependencies group across 1 directory with 62 updates

texpert/rails_6_rss_reader #5213

5.3.7 → 5.3.8 Patch PR

Closed 8 months ago 1 comment

Bump bootstrap from 5.3.3 to 5.3.8

ProgramadorVictor/fitdaily #30

5.3.3 → 5.3.8 Patch PR

Closed 9 months ago 1 comment

deps(frontend): bump the all-frontend group across 1 directory with 26 updates

yeongbin1999/ourlog #221

5.3.7 → 5.3.8 Patch PR

Closed 9 months ago 1 comment

Update bootstrap requirement from ^5.3.6 to ^5.3.8 in the prod-deps group

macenb/macenb.github.io #2

^5.3.6 → ^5.3.8 Patch PR

Closed 9 months ago

build(deps): update bootstrap requirement from ^5.3.6 to ^5.3.8 in the prod-deps group

Sniper-bit-coder/sniper-bit-coder.github.io #2

^5.3.6 → ^5.3.8 Patch PR

Closed 9 months ago

Bump bootstrap from 5.3.7 to 5.3.8 in /sources/packages/web

bcgov/SIMS #5231

5.3.7 → 5.3.8 Patch PR

Closed 9 months ago 2 comments

Bump the all-ui-deps group across 1 directory with 55 updates

craftercms/studio-ui #4662

5.3.7 → 5.3.8 Patch PR

Closed 9 months ago 2 comments

deps: bump the safe-dependencies group with 23 updates

agrc/wfrc-wasatch-choice #327

5.3.6 → 5.3.8 Patch PR

Closed 9 months ago 1 comment

deps: bump the safe-dependencies group with 13 updates

agrc/plpco-access-map #229

5.3.7 → 5.3.8 Patch PR

Closed 9 months ago 1 comment

Bump bootstrap from 5.3.6 to 5.3.8

alirashidnahal/raid_calculator #12

5.3.6 → 5.3.8 Patch PR

Closed 9 months ago

Bump the all-patch-minor group across 1 directory with 101 updates

eddelbuettel/PrairieLearn #1563

5.3.6 → 5.3.8 Patch PR

Closed 9 months ago 1 comment

Bump the js-production-dependencies group across 1 directory with 57 updates

texpert/rails_6_rss_reader #5205

5.3.7 → 5.3.8 Patch PR

Closed 9 months ago 1 comment

Bump the dependencies group across 1 directory with 21 updates

kentuy17/gofytwin #94

5.3.3 → 5.3.8 Patch PR

Closed 9 months ago 1 comment

Bump bootstrap from 5.3.7 to 5.3.8

norm0/norm0.com #80

5.3.7 → 5.3.8 Patch PR

Closed 9 months ago 2 comments

Package Details

Name:	`bootstrap`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/bootstrap`
JSON API:	View JSON

Security Advisories

10

Active advisories

MODERATE 10

View All npm Advisories

Package Information

Description:

The most popular front-end framework for developing responsive, mobile first projects on the web.

Repository:	https://github.com/twbs/bootstrap
Homepage:	https://getbootstrap.com/
Latest Release:	`5.3.6` about 1 year ago
Dependent Repos:	874,564
Dependent Packages:	17,952
Downloads:	20,752,506
Ranking:	Top 0.0383% by dependent repos Top 0.0595% by downloads Top 0.0059% by dependent pkgs

PR Status

Open 2,017 (48.5%)

Merged 780 (18.7%)

Closed 981 (23.6%)

PR Types

Major 857 (20.6%)

Minor 351 (8.4%)

Patch 2,566 (61.7%)

Removal 2 (0.0%)