Skip to content
OpenAdvisories

Package · npm

prosemirror-view

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.5
    CVE-2026-104847

    ProseMirror: XSS vulnerability in prosemirror-view's paste handling

    ProseMirror's view component renders and manages the editable browser interface for ProseMirror documents. Prior to 1.42.3, prosemirror-view paste handling accepts attacker-provided HTML whose clipboard slice context contains attributes that are not passed th…

    ProseMirror prosemirror-view prosemirror-view npm