Threats tagged 'ghsa-rh54-vffm-5fvp'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.1	CVE-2026-116688CKEditor · Cross-site scripting (XSS) in the engine package High8.12026-10-27GCVE DatabaseCVE-2026-116688 A Cross-Site Scripting (XSS) vulnerability exists in CKEditor 5 due to a prototype pollution issue in the es-toolkit library. This flaw allows unauthorized JavaScript execution when processing style attribute values. The vulnerability is fixed in CKEditor 5 versions 47.7.4 (LTS) and 48.5.1 and later. Report on CVE-2026-116688 Vulnerability CWE-79 #ghsa-rh54-vffm-5fvp #npm	GCVE Database	2026-10-27

Page 1 of 1