| Package | Affected versions | Patched versions |
|---|---|---|
| bootstrap-3-typeahead | > 4.0.2 |
Bootstrap-3-Typeahead after version 4.0.2 is vulnerable to a cross-site scripting flaw in the highlighter() function. An attacker could exploit this via user interaction to execute code in the user's browser.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free