Components Vulnerabilities Security Events Pricing MCP API

Find vulnerabilities. Fix fast with AI.

Search components by package, version, or CVE to get started.

org.webjars.npm/github-com-uxsolutions-boo… | Sonatype Guide

Get full component data and automated fixes with Sonatype Guide.

Sign up for free

org.webjars.npm

github-com-uxsolutions-bootstrap-datepicker

1.9.0

github-com-uxsolutions-bootstrap-datepicker 1.9.0

Latest

org.webjars.npm

PublishedJun 11, 2019•Policy

compliance

Developer Trust Score

Recommended Version:x.y.z

Recommended upgrade that meets your policy.

Compare Versions

Severity

Critical (0)

High (0)

Medium (5)

Low (0)

CVSS Score

0.010.0

EPSS Score

0.01.0

Malware

KEV StatusPublished

6.1CVE-2019-11358

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

PublishedJul 29, 2022

6.1CVE-2020-7656

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.

PublishedMay 21, 2020

6.1CVE-2020-11023EXPLOITED

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

PublishedApr 30, 2020

6.1sonatype-2018-0375

bootstrap-datepicker - Possible XSS in data-date-container attribute

PublishedNov 2, 2018

6.5sonatype-2014-0026

jQuery - Cross-Site Scripting (XSS)

PublishedMar 28, 2017