ckeditor ckeditor5

• CVE-2026-116688 High 8.1 CKEditor: Cross-site scripting (XSS) in the engine package 0.5%
• CVE-2026-116687 Low 3.1 CKEditor: Cross-site scripting (XSS) in the engine package 0.3%
• CVE-2026-28343 Medium 6.4 CKEditor: Cross-site scripting (XSS) in the HTML Support package 0.3%
• CVE-2025-58064 Low 2.3 CKEditor is susceptible to Cross-Site Scripting (XSS) through its clipboard package 0.4%
• CVE-2025-25299 Low 2.3 Cross-site scripting (XSS) in the real-time collaboration package 0.6%
• CVE-2024-45613 Medium 5.1 CKEditor 5 has Cross-site Scripting vulnerability in the clipboard package 0.5%
• CVE-2022-31175 Medium 5.8 Cross-site scripting caused by the editor instance destroying process in ckeditor5 0.9%
• CVE-2021-21391 Medium 6.5 Regular expression Denial of Service in multiple packages 1.7%
• CVE-2021-21254 Medium 6.5 Regular expression Denial of Service in Markdown plugin 1.8%