In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-14040.json"
[
{
"target": {
"file": "modules/video/src/dis_flow.cpp"
},
"digest": {
"line_hashes": [
"298041927708753403110938001728952750215",
"138797640858320364299898839777693487879",
"116974785773297744186183796307338548858",
"75379997002396599502240381536929189947",
"170257143309265595597477225676535966935",
"164121747793554509864917579038418304681",
"201021752490666827561714062676817986420",
"105147719955686055250084846780151334922",
"56701710896689694065189937059707678173",
"124971211623649456611462639220413651655",
"255290436587690751644580152820366504183",
"23505583089852078879551063608106491227",
"168198146314033192809568158007186924339",
"19327778700227399168039894817072131600",
"328629309396046314468773667721007653993",
"94508106354350938034063438569569661009",
"313789605656117901673979537546094968876",
"248632900153898856762258414891680382132",
"237684800255337657994516622440594415762",
"124601272687844992689277067162310420833",
"173511848978672811714099558783880212175",
"12639879945314778392007659539623804341"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2018-14040-b35c0ac2",
"source": "https://github.com/opencv/opencv/commit/9fa6c2ac046f69a7c7c20895bfefd22164b51f19",
"deprecated": false,
"signature_version": "v1"
}
]