CK
Product
ckeditor5
9
CVEs
0
On KEV
8.1
Max CVSS
2
New 30D
Severity mix
Critical 0High 1Medium 5Low 3
Watch
Add ckeditor5 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-116687 New | 3.1 | Oct 27 | CKEditor: Cross-site scripting (XSS) in the engine package Affected: >= 29.0.0, < 47.7.4; >= 48.0.0, < 48.5.1 |
| CVE-2025-58064 | 2.3 | Sep 3 | CKEditor is susceptible to Cross-Site Scripting (XSS) through its clipboard package Affected: >= 46.0.0, < 46.0.3; >= 44.2.0, < 45.2.2 |
| CVE-2025-25299 | 2.3 | Feb 20 | Cross-site scripting (XSS) in the real-time collaboration package Affected: @ckeditor/ckeditor5-real-time-collaboration: >= 41.3.0, < 44.2.1; ckeditor5-premium-features: >= 42.0.0, < 44.2.1 |
Showing 3