Skip to content
OpenAdvisories

Vendor

ProseMirror

1 known vulnerabilities.

Products

prosemirror-view 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.5
    CVE-2026-104847

    ProseMirror: XSS vulnerability in prosemirror-view's paste handling

    ProseMirror's view component renders and manages the editable browser interface for ProseMirror documents. Prior to 1.42.3, prosemirror-view paste handling accepts attacker-provided HTML whose clipboard slice context contains attributes that are not passed th…

    ProseMirror prosemirror-view prosemirror-view npm