Description
Dependabot found a vulnerability in our current bootstrap version: https://github.com/MovingBlocks/movingblocks.github.com/security/dependabot/146
The vulnerability affects the Carousel
component which we're using for the Gallery.
We don't use the data-slide
and data-slide-to
attributes directly and from what I've seen, reactstrap doesn't use them either for their CarouselControl
implementation. However, I don't know whether they are used by any of reactstrap's dependencies or any place else, so just to be sure, we should consider upgrading bootstrap to v5.
Upgrading bootstrap v5 would fix this issue, but that breaks the module list pagination (see screenshot below).
We need to figure out the breaking change and adjust our code accordingly if possible.