GHSA-cfcv-q4qq-2ph4

CKEditor 4 vulnerabilities in versions <4.16.1

No scoreFix available

Details see:

https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-m94c-37g6-cjhc ( CVE-2021-37695 ) https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-6226-h7ff-ch6c ( CVE-2021-32808 ) https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-7889-rm5j-hpgg ( CVE-2021-32809 )

Patch: https://github.com/pimcore/pimcore/pull/10032

What each source reports

GitHub Advisories No score

CKEditor 4 vulnerabilities in versions <4.16.1

Details see:

Patch: https://github.com/pimcore/pimcore/pull/10032

Record: GHSA-cfcv-q4qq-2ph4
Updated: 2026-11-02

OSV No score

CKEditor 4 vulnerabilities in versions <4.16.1

Details see:

Patch: https://github.com/pimcore/pimcore/pull/10032

Record: GHSA-cfcv-q4qq-2ph4
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`pimcore/pimcore` Packagist	before 10.1.1	10.1.1
`pimcore/pimcore` Packagist	before 10.1.1, plus listed versions 10.0.82.2.02.2.12.2.22.3.0 Show 45 moreShow less 3.0.03.0.13.0.23.0.33.0.43.0.53.0.63.1.03.1.14.0.04.0.14.1.04.1.14.1.24.1.34.2.04.3.04.3.14.4.04.4.14.4.24.4.34.5.04.6.04.6.14.6.24.6.34.6.44.6.5v10.0.0v10.0.0-BETA1v10.0.0-BETA2v10.0.0-BETA3v10.0.0-BETA4v10.0.1v10.0.2v10.0.3v10.0.4v10.0.5v10.0.6v10.0.7v10.0.9v10.1.0v5.0.0v5.0.0-RC	10.1.1

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	GitHub Advisories, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

GHSA-cfcv-q4qq-2ph4 is a vulnerability with no CVSS score yet in pimcore/pimcore, published August 23, 2021. No source lists public exploit code. Fixed in pimcore/pimcore 10.1.1.

References

This page doesn't list everything

Left out here: 109 versions. The JSON record has them.