Linux Distros Unpatched Vulnerability : CVE-2026-28343

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. Starting in version 29.0.0 and prior to version 47.6.0, a cross-site scripting XSS...

CVE-2026-28343

CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. Starting in version 29.0.0 and prior to version 47.6.0, a cross-site scripting XSS vulnerability has been discovered in the General HTML Support feature. This vulnerability could be triggered by inserting specially craft...

@7365admin1/layer-common (>=3.0.8, <=4.1.3-staging.257), @_sh/strapi-plugin-ckeditor (>=7.0.0, <=7.1.0) +95 more potentially affected by CVE-2026-28343 via @ckeditor/ckeditor5-html-support (>=47.0.0, <=47.5.0-alpha.8)

@ckeditor/ckeditor5-html-support NPM version =47.0.0, =3.0.8, =7.0.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.5....

@7365admin1/layer-common (>=3.0.8, <=4.1.3-staging.257), @_sh/strapi-plugin-ckeditor (>=7.0.0, <=7.1.0) +95 more potentially affected by CVE-2026-28343 via @ckeditor/ckeditor5-engine (>=47.0.0, <=47.5.0-alpha.8)

@ckeditor/ckeditor5-engine NPM version =47.0.0, =3.0.8, =7.0.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.0.0-alpha.0, =47.5.0 and...

4game-support-ckeditor5-custom-build (>=0.0.1, <=0.0.5), 87-midnight-ckeditor5 (>=0.0.3, <=0.0.5) +669 more potentially affected by CVE-2026-28343 via @ckeditor/ckeditor5-html-support (>=29.2.0, <=47.5.0-alpha.8)

@ckeditor/ckeditor5-html-support NPM version =29.2.0, =0.0.1, =0.0.3, =0.0.1, =3.0.8, =0.0.1, =42.0.1, =2.0.0, =0.7.0, =0.0.6, =1.0.1, =0.0.1, =0.0.1, =1.0.0, =36.0.0, =0.0.2, =0.0.31 and more Source cves: CVE-2026-28343 Source advisory: OSV:GHSA-JRQM-VMQC-GM93...