CVE-2026-116687

CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 29.0.0 until 47.7.4 and 48.5.1, specially crafted markup can trigger cross-site scripting when General HTML Support is enabled and specifically configured to allow object content. Processing that content can execute...

CVE-2026-116687

The CKEditor 5 JavaScript rich-text editor is vulnerable to Cross-site scripting (XSS) in its engine package (versions 29.0.0 through 47.7.4 and 48.5.1). The vulnerability occurs when General HTML Support is enabled and specifically configured to allow object content ; specially crafted markup ca...

EUVD-2026-111365

CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 29.0.0 until 47.7.4 and 48.5.1, specially crafted markup can trigger cross-site scripting when General HTML Support is enabled and specifically configured to allow object content. Processing that content can execute...

CVE-2026-116687 CKEditor: Cross-site scripting (XSS) in the engine package

CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 29.0.0 until 47.7.4 and 48.5.1, specially crafted markup can trigger cross-site scripting when General HTML Support is enabled and specifically configured to allow object content. Processing that content can execute...

CVE-2026-73265

RustFS is a distributed object storage system built in Rust. RustFS authorizes explicit versionId reads in GetObject, CopyObject sources, and UploadPartCopy sources with s3:GetObject instead of s3:GetObjectVersion, allowing principals without historical-version permission to disclose known...

CVE-2008-1032

Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.5.3 allows user-assisted remote attackers to execute arbitrary code via an 1 Automator, 2 Help, 3 Safari, or 4 Terminal content type for a downloadable object, which does not trigger a "potentially unsafe" warning message...