Security Advisory

CVE-2021-23472

3.1
LOW

Vulnerability Description

This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array (instead of a string) even if the escape attribute is set.
Published Date November 3, 2021
Official Source NIST NVD Advisory