Ckeditor Ckeditor5 vulnerabilities

• ckeditor ckeditor5 CKEditor: Cross-site scripting (XSS) in the engine package CVE-2026-116688 Fix available 8.1 HighOctober 27, 2026
• ckeditor ckeditor5 CKEditor: Cross-site scripting (XSS) in the engine package CVE-2026-116687 Fix available 3.1 LowOctober 27, 2026
• ckeditor ckeditor5 CKEditor: Cross-site scripting (XSS) in the HTML Support package CVE-2026-28343 Fix available 6.4 MediumMarch 4, 2026
• angular, ckeditor ckeditor5 +1 more A reflected cross-site scripting (XSS) vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows... CVE-2025-61261 5.4 MediumNovember 7, 2025
• ckeditor ckeditor5 CKEditor is susceptible to Cross-Site Scripting (XSS) through its clipboard package CVE-2025-58064 Fix available 2.3 LowSeptember 3, 2025
• ckeditor ckeditor5 Cross-site scripting (XSS) in the real-time collaboration package CVE-2025-25299 Fix available 2.3 LowFebruary 20, 2025
• ckeditor ckeditor5 CKEditor 5 has Cross-site Scripting vulnerability in the clipboard package CVE-2024-45613 Fix available 5.1 MediumSeptember 25, 2024
• ckeditor ckeditor5, ckeditor5-html-embed, ckeditor5-html-support +1 more +3 more Cross-site scripting caused by the editor instance destroying process in ckeditor5 CVE-2022-31175 Fix available 5.8 MediumAugust 3, 2022
• ckeditor ckeditor5, ckeditor5-engine, ckeditor5-font +6 more +8 more Regular expression Denial of Service in multiple packages CVE-2021-21391 Fix available 6.5 MediumApril 6, 2021
• ckeditor ckeditor5 Regular expression Denial of Service in Markdown plugin CVE-2021-21254 Fix available 6.5 MediumJanuary 29, 2021