CVE-2021-23472
This affects all versions of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array (instead of a string) even if the escape attribute is set.
Date published : 2021-11-03
https://github.com/wenzhixin/bootstrap-table/blob/develop/src/utils/index.js%23L218