StackRadarChart IndexLive demo

CVE-2019-8331

Medium

Advisory

Published 22 Feb 2019In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.1; base score, highest
EPSS: 0.164; 97th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 22; of 17,781 indexed, latest versions
Container images: 18; deployed by those charts
Fix available: 3 of 3; affected packages

Bootstrap Vulnerable to Cross-Site Scripting

Carried by container images the latest versions of 22 of 17,781 indexed charts deploy, on 18 images.

Affected package	Affected versions	Fixed in	Images
bootstrapnpm	3.1.1, 3.2.0, 3.3.2, 3.3.4+5 more	3.4.1, 4.3.1	15
bootstrapmaven	3.3.5, 3.3.6, 3.3.7-1	3.4.1	3
twbs/bootstrapcomposer	v4.1.0	4.3.1	1

OSV records: GHSA-9v3m-8fp8-mj99

Charts affected

22 by stars

Chart

Latest

Affected images

Radar Score

spring-petclinic-cloudplatform9-community

1 of 6 See more

spring-petclinic-cloud platform9-community 0.2.0

1 of the 6 container images this version deploys carry CVE-2019-8331.

Container image	Digest	Package	Fixed in
platform9community/api-gateway :latest	40a4970de568	bootstrap@3.3.7-1	3.4.1

Open the chart page →

41,872

kongakonga

1 of 1 See more

5,209

distributed-jmetercloudnativeapp

1 of 1 See more

distributed-jmeter cloudnativeapp 1.0.1

1 of the 1 container images this version deploys carry CVE-2019-8331.

Container image	Digest	Package	Fixed in
pedrocesarti/jmeter-docker :3.3	14851f144f57	bootstrap@3.3.4	3.4.1

Open the chart page →

4,532

ranetogabisonfire

1 of 1 See more

raneto gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2019-8331.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/raneto :version-0.16.6	ef768f3df5d0	bootstrap@3.3.2	3.4.1

Open the chart page →

2,519

kafka-managerradar-base

1 of 1 See more

kafka-manager radar-base 2.3.1

1 of the 1 container images this version deploys carry CVE-2019-8331.

Container image	Digest	Package	Fixed in
radarbase/kafka-manager :1.3.3.18	1d2af7dd5a4e	bootstrap@3.3.5	3.4.1

Open the chart page →

4,000

openapiassist-iot-open-api-management

1 of 6 See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2019-8331.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	bootstrap@3.3.7	3.4.1

Open the chart page →

18,277

registry-uibryanalves

1 of 1 See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2019-8331.

Container image	Digest	Package	Fixed in
konradkleine/docker-registry-frontend :v2	181aad54ee64	bootstrap@3.3.4	3.4.1

Open the chart page →

4,069

daskcloudnativeapp

1 of 2 See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2019-8331.

Container image	Digest	Package	Fixed in
daskdev/dask-notebook :1.1.0	052630f5ca04	bootstrap@3.3.7	3.4.1

Open the chart page →

29,901

kongacreate-databases

1 of 1 See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-8331.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	bootstrap@3.3.7	3.4.1

Open the chart page →

5,209

grocygeek-cookbook

1 of 1 See more

grocy geek-cookbook 8.5.2

1 of the 1 container images this version deploys carry CVE-2019-8331.

Container image	Digest	Package	Fixed in
linuxserver/grocy :version-v3.1.3	291296e66c2a	bootstrap@4.0.0	4.3.1

Open the chart page →

1,043

Governify-Bluejaygovernify

1 of 12 See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2019-8331.

Container image	Digest	Package	Fixed in
governify/render :v2.2.0	daeca1ce28e6	bootstrap@4.1.1	4.3.1

Open the chart page →

22,512

Governify-Falcongovernify

1 of 10 See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2019-8331.

Container image	Digest	Package	Fixed in
governify/render :v2.2.0	daeca1ce28e6	bootstrap@4.1.1	4.3.1

Open the chart page →

24,319

ibm-microclimateibm-charts

1 of 8 See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2019-8331.

Container image	Digest	Package	Fixed in
ibmcom/microclimate-portal :latest	ed5505e5c7ec	bootstrap@3.3.4	3.4.1

Open the chart page →

57,669

fossologymidokura-community

1 of 2 See more

fossology midokura-community 0.2.2

1 of the 2 container images this version deploys carry CVE-2019-8331.

Container image	Digest	Package	Fixed in
fossology/fossology :4.2.1	8bd1f22ba7bb	bootstrap@4.1.0 twbs/bootstrap@v4.1.0	4.3.1 4.3.1

Open the chart page →

3,294

example-dev-toolsnoygal

1 of 3 See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2019-8331.

Container image	Digest	Package	Fixed in
linuxserver/codimd :latest	b801bbcf6386	bootstrap@3.1.1	3.4.1

Open the chart page →

27,465

codimdphntom

1 of 3 See more

6,524

powerdnspuckpuck

1 of 4 See more

powerdns puckpuck 2.0.0

1 of the 4 container images this version deploys carry CVE-2019-8331.

Container image	Digest	Package	Fixed in
pschiffe/pdns-admin :0.4.1	37ebba8c2b8f	bootstrap@3.1.1	3.4.1

Open the chart page →

4,616

1 of 1 See more

5,215

umsappstacksimplify

1 of 3 See more

umsapp stacksimplify 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-8331.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kube-usermgmt-webapp :1.0.0-mysqldb	41b45003c6b6	bootstrap@3.3.6	3.4.1

Open the chart page →

6,101

kurento_webrtc_demostunner

1 of 2 See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2019-8331.

Container image	Digest	Package	Fixed in
l7mp/kurento-one2one-call-server :latest	fd2b2d06fff6	bootstrap@3.3.7	3.4.1

Open the chart page →

12,460

stunner-kurento-one2one-callstunner

1 of 2 See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2019-8331.

Container image	Digest	Package	Fixed in
l7mp/kurento-one2one-call-server :latest	fd2b2d06fff6	bootstrap@3.3.7	3.4.1

Open the chart page →

12,460

1 of 1 See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry CVE-2019-8331.

Container image	Digest	Package	Fixed in
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	bootstrap@3.2.0	3.4.1

Open the chart page →

3,827

Container images carrying it

18 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
pantsel/konga :latest	c8172b75607d	bootstrap@3.3.7	3.4.1	3
governify/render :v2.2.0	daeca1ce28e6	bootstrap@4.1.1	4.3.1	2
l7mp/kurento-one2one-call-server :latest	fd2b2d06fff6	bootstrap@3.3.7	3.4.1	2
daskdev/dask-notebook :1.1.0	052630f5ca04	bootstrap@3.3.7	3.4.1	1
fossology/fossology :4.2.1	8bd1f22ba7bb	bootstrap@4.1.0 twbs/bootstrap@v4.1.0	4.3.1 4.3.1	1
gristlabs/grist :0.7.9	6e71b1914a7e	bootstrap@3.3.5	3.4.1	1
ibmcom/microclimate-portal :latest	ed5505e5c7ec	bootstrap@3.3.4	3.4.1	1
konradkleine/docker-registry-frontend :v2	181aad54ee64	bootstrap@3.3.4	3.4.1	1
linuxserver/codimd :latest	b801bbcf6386	bootstrap@3.1.1	3.4.1	1
linuxserver/grocy :version-v3.1.3	291296e66c2a	bootstrap@4.0.0	4.3.1	1
pedrocesarti/jmeter-docker :3.3	14851f144f57	bootstrap@3.3.4	3.4.1	1
phntom/codimd :2.4.3	1b9aafbb62e6	bootstrap@3.1.1	3.4.1	1
platform9community/api-gateway :latest	40a4970de568	bootstrap@3.3.7-1	3.4.1	1
pschiffe/pdns-admin :0.4.1	37ebba8c2b8f	bootstrap@3.1.1	3.4.1	1
radarbase/kafka-manager :1.3.3.18	1d2af7dd5a4e	bootstrap@3.3.5	3.4.1	1
ghcr.io/linuxserver/raneto :version-0.16.6	ef768f3df5d0	bootstrap@3.3.2	3.4.1	1
ghcr.io/stacksimplify/kube-usermgmt-webapp :1.0.0-mysqldb	41b45003c6b6	bootstrap@3.3.6	3.4.1	1
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	bootstrap@3.2.0	3.4.1	1