EUVD-2026-51622

Jodit Editor is a WYSIWYG editor with a built-in file browser & image editor. Prior to 4.13.6, Jodit's clean-html denyTags filter does not normalize foreign SVG or MathML script node names, allowing a script element nested directly in SVG or MathML to remain in editor.value and execute when conte...

@chumager/itdfw-site-base (>=2.4.0 <=2.4.5), @simpleview/sv-mosaic (>=28.0.0-staging-2b964a <=38.0.1-62799cabb) +4 more potentially affected by CVE-2022-23461 via jodit (>=3.10.2 <=3.23.3)

jodit NPM version =3.10.2, =2.4.0, =28.0.0-staging-2b964a, =1.0.15, =1.0.0, =1.5.1, =1.4.58, =1.6.90 Source cves: CVE-2022-23461 Source advisory: OSV:GHSA-42HX-VRXX-5R6V...