Skip to content
OpenAdvisories

Package · npm

@atlaskit/editor-core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2019-20903

    Cross-site scripting in @atlaskit/editor-core

    The hyperlinks functionality in atlaskit/editor-core in before version 113.1.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in link targets.

    Atlassian @atlaskit/editor-core @atlaskit/editor-core npm