Package · Wolfi

keycloak-26.6

83 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

83 results · Feed

Medium 6.9

CVE-2025-66400

mdast-util-to-hast unsanitized class attribute

mdast-util-to-hast is an mdast utility to transform to hast. From 13.0.0 to before 13.2.1, multiple (unprefixed) classnames could be added in markdown source by using character references. This could make rendered user supplied markdown code elements appear l…

syntax-tree mdast-util-to-hast langfuse-3-worker langfuse-3 Wolfi npm

Dec 1, 2025
Medium 5.6

CVE-2025-1647

XSS in Bootstrap title attribute for Tooltip and Popover

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting (XSS).This issue affects Bootstrap: from 3.4.1 before 4.0.0.

Bootstrap Bootstrap jupyter-base-notebook keycloak-26.5 Debian Ubuntu Wolfi npm

May 15, 2025
Medium 6.4

CVE-2024-6485 Public exploit

XSS in Bootstrap button component

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting mal…

Bootstrap Bootstrap-sass Bootstrap bootstrap-sass Debian Ubuntu Azure Linux Wolfi npm

Jul 11, 2024