Skip to content
OpenAdvisories

Package · RubyGems

prosemirror_to_html

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.6
    CVE-2025-64501

    ProsemirrorToHtml: Cross-Site Scripting vulnerability through unescaped HTML attribute values

    ProsemirrorToHtml is a JSON converter which takes ProseMirror-compatible JSON and outputs HTML. In versions 0.2.0 and below, the `prosemirror_to_html` gem is vulnerable to Cross-Site Scripting (XSS) attacks through malicious HTML attribute values. While tag c…

    etaminstudio prosemirror_to_html prosemirror_to_html RubyGems