Skip to content

CKEditor 5 has Cross-site Scripting (XSS) in the HTML Support package

Moderate severity GitHub Reviewed Published Mar 4, 2026 in ckeditor/ckeditor5 • Updated Mar 19, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts