Skip to content
OpenAdvisories

Package · npm

@ckeditor/ckeditor5-clipboard

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 2.3
    CVE-2025-58064

    CKEditor is susceptible to Cross-Site Scripting (XSS) through its clipboard package

    CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. ckeditor5 and ckeditor5-clipboard versions 46.0.0 through 46.0.2 and 44.2.0 through 45.2.1 contain a Cross-Site Scripting (XSS) vulnerability. Ability to exploit could be triggered b…

    ckeditor ckeditor5 ckeditor5 @ckeditor/ckeditor5-clipboard npm
  • Medium 5.1
    CVE-2024-45613

    CKEditor 5 has Cross-site Scripting vulnerability in the clipboard package

    CKEditor 5 is a JavaScript rich-text editor. Starting in version 40.0.0 and prior to version 43.1.1, a Cross-Site Scripting (XSS) vulnerability is present in the CKEditor 5 clipboard package. This vulnerability could be triggered by a specific user action, le…

    ckeditor ckeditor5 request-tracker4 ldap-account-manager Ubuntu npm