sceditor vulnerabilities (npm)

1 vulnerability.

• sceditor npm SCEditor affected by DOM XSS via emoticon URL/HTML injection CVE-2026-25581 Fix available 5.4 MediumFebruary 6, 2026