Skip to content

[🐸 Frogbot] Upgrade bootstrap to 4.3.1#3

Open
github-actions[bot] wants to merge 1 commit intomasterfrom
frogbot-bootstrap-94d24c2891c35703b4f8e5ccc1867e32
Open

[🐸 Frogbot] Upgrade bootstrap to 4.3.1#3
github-actions[bot] wants to merge 1 commit intomasterfrom
frogbot-bootstrap-94d24c2891c35703b4f8e5ccc1867e32

Conversation

@github-actions
Copy link

🚨 This automated pull request was created by Frogbot and fixes the below:

📦 Vulnerable Dependencies

✍️ Summary

SEVERITY CONTEXTUAL ANALYSIS DIRECT DEPENDENCIES IMPACTED DEPENDENCY FIXED VERSIONS CVES

Medium
Undetermined bootstrap:4.0.0 bootstrap 4.0.0 [4.1.2] CVE-2018-14040

🔬 Research Details

Description:
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.


Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant