Add CVE-2019-8331/twitter-bootstrap*

the 4.x series is fixed in 4.3.1 upstream, but for the older series no
initial check has been performed. As such add the items for now as
undetermined until properly evaluated.