Skip to content
OpenAdvisories

Package · npm

@toast-ui/editor

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-cr56-66mx-293v

    Cross-Site Scripting in @toast-ui/editor

    Versions of `@toast-ui/editor` prior to 2.2.0 are vulnerable to Cross-Site Scripting (XSS). There are multiple bypasses to the package's built-in XSS sanitization. This may allow attackers to execute arbitrary JavaScript on a victim's browser. ## Recommendati…

    @toast-ui/editor npm