Lucene search
+L

611 matches found

osv_ghsa
osv_ghsa
•added 2026/10/27 9:05 p.m.•7 views

GHSA-RH54-VFFM-5FVP CKEditor: Cross-site scripting (XSS) in the engine package

Impact A Cross-Site Scripting XSS vulnerability has been discovered in the CKEditor 5 engine. This vulnerability is caused by a prototype pollution issue in the es-toolkit library used in the CKEditor 5 codebase. This vulnerability could lead to unauthorized JavaScript code execution when the...

8.1CVSS6AI score
SaveExploits0References6
Rows per page
Query Builder