bootstrap

The most popular front-end framework for developing responsive, mobile first projects on the web.

Latest 5.3.8

NPM

88%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

100

Are you affected? Scan for Free

Health Score Breakdown

Release history

The package is mature with 69 releases, but it has had no registry release in the last 12 months; the repository's recent activity partly offsets this maintenance concern.

Vulnerabilities

Title	Versions	Severity
CVE-2025-1647 bootstrap is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 3.4.1 - 3.4.1.	3.4.1 - 3.4.1	Medium
CVE-2024-6531 bootstrap is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 4.0.0 - 4.6.2, 4.0.0 - 4.6.2 and 4.0.0 - 4.6.2.	4.0.0 - 4.6.2	Medium
CVE-2024-6485 bootstrap is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 1.4.0 - 3.4.1.	1.4.0 - 3.4.1	Medium
CVE-2024-6484 bootstrap is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 2.0.0 - 3.4.1, 2.0.0 - 3.4.1 and 2.0.0 - 3.4.1.	2.0.0 - 3.4.1	Medium
CVE-2018-14040 bootstrap is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 4.0.0 - 4.1.2, 4.0.0 - 4.1.2, 2.3.0 - 3.4.0, 2.3.0 - 3.4.0, 2.3.0 - 3.4.0 and 4.0.0 - 4.1.2.	2.3.0 - 3.4.04.0.0 - 4.1.2	Medium