ckeditor5 vulnerabilities (npm)

5 vulnerabilities.

• ckeditor5 npm CKEditor: Cross-site scripting (XSS) in the engine package CVE-2026-116688 Fix available 8.1 HighOctober 27, 2026
• ckeditor5 npm CKEditor: Cross-site scripting (XSS) in the engine package CVE-2026-116687 Fix available 3.1 LowOctober 27, 2026
• ckeditor5 npm CKEditor: Cross-site scripting (XSS) in the HTML Support package CVE-2026-28343 Fix available 6.4 MediumMarch 4, 2026
• ckeditor5 npm CKEditor is susceptible to Cross-Site Scripting (XSS) through its clipboard package CVE-2025-58064 Fix available 2.3 LowSeptember 3, 2025
• ckeditor5 npm CKEditor 5 has Cross-site Scripting vulnerability in the clipboard package CVE-2024-45613 Fix available 5.1 MediumSeptember 25, 2024