MEDIUM6.4npm
GHSA-jrqm-vmqc-gm93· CVE-2026-28343CKEditor 5 has Cross-site Scripting (XSS) in the HTML Support package
Modified: 3/19/2026
package
npm/ckeditor5
pkg:npm/ckeditor5
HIGH7.2npm
GHSA-rgg8-g5x8-wr9v· CVE-2024-45613Cross-site scripting (XSS) in the clipboard package
Modified: 10/15/2024
LOWnpm
GHSA-x9gp-vjh6-3wv6· CVE-2025-58064CKEditor 5 cross-site scripting (XSS) vulnerability in the clipboard package
Modified: 9/4/2025