Skip to content
OpenAdvisories

Package · npm

ckeditor4-dev

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2021-26271

    CKEditor 4 ReDoS Vulnerability

    It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs plugin).

    ckeditor ckeditor ckeditor4-dev Debian Ubuntu npm