Bootstrap

Bootstrap is tracked by BlackTree as a software framework or development platform. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.

Lifecycle status

No support or retirement date is shown unless BlackTree can link it to a registered publisher source. A missing date means that a boundary is not publicly stated, has not yet been extracted, or still needs source routing. It does not mean the product is supported indefinitely.

Product overview

Main capabilities

Application development components
Versioned runtime or build interfaces
Security and compatibility maintenance

Typical use

Used by software teams to build, run or maintain applications.

Deployment

Included in source projects, application dependencies, build systems or managed runtimes.

Lifecycle records

Release	Boundary	Date
2.x	Support ends	19 August 2013
3.x	Support ends	24 July 2019
5.x	Support ends	19 July 2022
4.x	Support ends	1 January 2023

Official sources

VERIFIED

Bootstrap official lifecycle source

Checked automatically.

Extracted 4 lifecycle record(s), including 4 bounded date record(s), from the registered official source.

Open publisher source

Package vulnerability advisories

CVE-2024-6485

Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributes

CVE-2025-1647

Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip Components

CVE-2018-14040

Bootstrap vulnerable to Cross-Site Scripting (XSS)

Fixed: 4.1.2, 3.4.0

CVE-2018-20677

bootstrap Cross-site Scripting vulnerability

Fixed: 3.4.0

CVE-2019-8331

Bootstrap Vulnerable to Cross-Site Scripting

Fixed: 4.3.1, 3.4.1

CVE-2016-10735

Bootstrap Cross-site Scripting vulnerability

Fixed: 3.4.0, 4.0.0-beta.2

CVE-2018-20676

XSS vulnerability that affects bootstrap

Fixed: 3.4.0

CVE-2018-14042

Bootstrap Cross-site Scripting vulnerability

Fixed: 4.1.2, 3.4.0