CK
Product
ckeditor5
7
CVEs
0
On KEV
8.1
Max CVSS
2
New 30D
Severity mix
Critical 0High 1Medium 5Low 1
Watch
Add ckeditor5 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-116688 New | 8.1 | Oct 27 | CKEditor: Cross-site scripting (XSS) in the engine package Affected: >= 45.0.0, < 47.7.4; >= 48.0.0, < 48.5.1 |
| CVE-2021-21254 | 6.5 | Jan 29 | CKEditor 5 is an open source rich text editor framework with a modular architecture Affected: before 25.0.0 |
| CVE-2026-28343 | 6.1 | Mar 5 | CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture Affected: before 47.6.0 |
| CVE-2024-45613 | 6.1 | Sep 25 | CKEditor 5 is a JavaScript rich-text editor Affected: 40.0.0 before 43.1.1 |
| CVE-2025-61261 | 5.4 | Nov 7 | A reflected cross-site scripting (XSS) vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via… Affected: 46.1.0 |
| CVE-2022-31175 | 4.7 | Aug 3 | Cross-site scripting caused by the editor instance destroying process in ckeditor5 Affected: < 35.0.1 |
| CVE-2026-116687 New | 3.1 | Oct 27 | CKEditor: Cross-site scripting (XSS) in the engine package Affected: >= 29.0.0, < 47.7.4; >= 48.0.0, < 48.5.1 |
Showing 7