[Pkg-javascript-devel] Bug#1105899: twitter-bootstrap3: CVE-2025-1647

[Salvatore Bonaccorso]

Source: twitter-bootstrap3
Version: 3.4.1+dfsg-4
Severity: important
Tags: security upstream
X-Debbugs-Cc: carnil at debian.org, Debian Security Team <team at security.debian.org>

Hi,

The following vulnerability was published for twitter-bootstrap3.

CVE-2025-1647[0]:
| Improper Neutralization of Input During Web Page Generation (XSS or
| 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site
| Scripting (XSS).This issue affects Bootstrap: from 3.4.1 before
| 4.0.0.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2025-1647
    https://www.cve.org/CVERecord?id=CVE-2025-1647
[1] https://www.herodevs.com/vulnerability-directory/cve-2025-1647

Regards,
Salvatore