[MEDIUM] Bootstrap Cross-site Scripting vulnerability

PKSA-5g9g-4yxq-dm4s CVE-2018-14042 GHSA-7mvr-5x2g-wfc8

Affected package: twbs/bootstrap

Affected version: >=2.3.0,<3.4.0|>=4.0.0,<4.1.2

Reported by:
GitHub