Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/ckeditor@4.0.2
purl pkg:gem/ckeditor@4.0.2
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-4x92-vapt-n7dz
Aliases:
CVE-2021-41165
GHSA-7h26-63m7-qhf2
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CKEditor4 is an open source WYSIWYG HTML editor. The vulnerability allowed to inject malformed comments HTML bypassing content sanitization, which could result in executing JavaScript code. It affects all users using the CKEditor 4 at The problem has been recognized and patched. There are no reported fixed by versions.
VCID-8hvk-a5es-v3e4
Aliases:
CVE-2021-41164
GHSA-pvmx-g8h5-cprj
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CKEditor4 is an open source WYSIWYG HTML editor. The vulnerability allowed to inject malformed HTML bypassing content sanitization, which could result in executing JavaScript code. There are no reported fixed by versions.
VCID-un66-k85j-b7d2
Aliases:
CVE-2022-24728
GHSA-4fc4-4p5g-6w89
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4 prior to version 4.18.0. The vulnerability allows someone to inject malformed HTML bypassing content sanitization, which could result in executing JavaScript code. This problem has been patched in version 4.18.0. There are currently no known workarounds. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T17:38:54.195982+00:00 Ruby Importer Affected by VCID-un66-k85j-b7d2 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ckeditor/CVE-2022-24728.yml 38.4.0
2026-04-16T17:38:31.018607+00:00 Ruby Importer Affected by VCID-4x92-vapt-n7dz https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ckeditor/CVE-2021-41165.yml 38.4.0
2026-04-16T17:38:30.783858+00:00 Ruby Importer Affected by VCID-8hvk-a5es-v3e4 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ckeditor/CVE-2021-41164.yml 38.4.0
2026-04-11T21:35:58.034456+00:00 Ruby Importer Affected by VCID-un66-k85j-b7d2 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ckeditor/CVE-2022-24728.yml 38.3.0
2026-04-11T21:35:32.712987+00:00 Ruby Importer Affected by VCID-4x92-vapt-n7dz https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ckeditor/CVE-2021-41165.yml 38.3.0
2026-04-11T21:35:32.455425+00:00 Ruby Importer Affected by VCID-8hvk-a5es-v3e4 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ckeditor/CVE-2021-41164.yml 38.3.0
2026-04-02T19:34:14.013942+00:00 Ruby Importer Affected by VCID-un66-k85j-b7d2 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ckeditor/CVE-2022-24728.yml 38.1.0
2026-04-02T19:33:51.619430+00:00 Ruby Importer Affected by VCID-4x92-vapt-n7dz https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ckeditor/CVE-2021-41165.yml 38.1.0
2026-04-02T19:33:51.387919+00:00 Ruby Importer Affected by VCID-8hvk-a5es-v3e4 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ckeditor/CVE-2021-41164.yml 38.1.0
2026-04-01T15:51:07.215679+00:00 Ruby Importer Affected by VCID-un66-k85j-b7d2 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ckeditor/CVE-2022-24728.yml 38.0.0
2026-04-01T15:50:43.486546+00:00 Ruby Importer Affected by VCID-4x92-vapt-n7dz https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ckeditor/CVE-2021-41165.yml 38.0.0
2026-04-01T15:50:43.203932+00:00 Ruby Importer Affected by VCID-8hvk-a5es-v3e4 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ckeditor/CVE-2021-41164.yml 38.0.0