| Bug | jessie | stretch | Description |
|---|
| CVE-2019-8331 | vulnerable (no DSA) | vulnerable (no DSA) | In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in t ... |
| CVE-2018-20677 | vulnerable (no DSA) | vulnerable (no DSA) | In Bootstrap before 3.4.0, XSS is possible in the affix configuration ... |
| CVE-2018-20676 | vulnerable (no DSA) | vulnerable (no DSA) | In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewpor ... |
| CVE-2018-14042 | vulnerable (no DSA) | vulnerable (no DSA) | In Bootstrap before 4.1.2, XSS is possible in the data-container prope ... |
| CVE-2018-14040 | vulnerable (no DSA) | vulnerable (no DSA) | In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent ... |