From f661e36043becc597f6653cea9b4d61cd291058f Mon Sep 17 00:00:00 2001 From: Al Snow Date: Mon, 17 Nov 2025 15:50:15 -0500 Subject: [PATCH 1/2] Fixed nvd url and remoed GHSA references --- gems/bootstrap/CVE-2018-14041.yml | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/gems/bootstrap/CVE-2018-14041.yml b/gems/bootstrap/CVE-2018-14041.yml index 141d11be9b..efb0078591 100644 --- a/gems/bootstrap/CVE-2018-14041.yml +++ b/gems/bootstrap/CVE-2018-14041.yml @@ -1,7 +1,6 @@ --- gem: bootstrap cve: 2018-14041 -ghsa: 3wqf-4x89-9g79 url: https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2 title: Bootstrap vulnerable to Cross-Site Scripting (XSS) date: 2018-09-13 @@ -13,7 +12,7 @@ patched_versions: - ">= 4.1.2" related: url: - - https://nvd.nist.gov/vuln/detail/CVE-2018-14040 + - https://nvd.nist.gov/vuln/detail/CVE-2018-14041 - https://github.com/twbs/bootstrap/issues/26625 - https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2 - https://github.com/twbs/bootstrap/issues/26423 @@ -25,4 +24,3 @@ related: - https://seclists.org/bugtraq/2019/May/18 - https://www.oracle.com/security-alerts/cpuApr2021.html - https://www.tenable.com/security/tns-2021-14 - - https://github.com/advisories/GHSA-3wqf-4x89-9g79 From 70dba1b98a0a7769f3556e81e1fbe5989ab8b73c Mon Sep 17 00:00:00 2001 From: Al Snow Date: Mon, 17 Nov 2025 15:57:00 -0500 Subject: [PATCH 2/2] Put back correct GHSA reference --- gems/bootstrap/CVE-2018-14041.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/gems/bootstrap/CVE-2018-14041.yml b/gems/bootstrap/CVE-2018-14041.yml index efb0078591..e7a174b486 100644 --- a/gems/bootstrap/CVE-2018-14041.yml +++ b/gems/bootstrap/CVE-2018-14041.yml @@ -1,6 +1,7 @@ --- gem: bootstrap cve: 2018-14041 +ghsa: pj7m-g53m-7638 url: https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2 title: Bootstrap vulnerable to Cross-Site Scripting (XSS) date: 2018-09-13 @@ -24,3 +25,4 @@ related: - https://seclists.org/bugtraq/2019/May/18 - https://www.oracle.com/security-alerts/cpuApr2021.html - https://www.tenable.com/security/tns-2021-14 + - https://github.com/advisories/GHSA-pj7m-g53m-7638