Skip to main content
cve.nowby Sazabi
← npm
npmPackage

@ckeditor/ckeditor5-html-support

2 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 2 medium
Registry
npm

Advisories 2

  • CVE-2026-28343Medium 6.4

    CKEditor: Cross-site scripting (XSS) in the HTML Support package

    Affected: from 29.0.0, fixed in 47.6.0.

  • CVE-2022-31175Medium 5.8

    Cross-site scripting caused by the editor instance destroying process in ckeditor5

    Affected: fixed in 35.0.1.