Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/ckeditor4@4.5.2
purl pkg:npm/ckeditor4@4.5.2
Tags Ghost
Next non-vulnerable version 4.25.0
Latest non-vulnerable version 4.25.0
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-sd2a-hmu2-wbax
Aliases:
CVE-2021-32809
GHSA-7889-rm5j-hpgg
Code Injection ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEdit The vulnerability allowed to abuse paste functionality using malformed HTML, which could result in injecting arbitrary HTML into the editor.
4.16.2
Affected by 9 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-02T16:57:40.129978+00:00 GHSA Importer Affected by VCID-sd2a-hmu2-wbax https://github.com/advisories/GHSA-7889-rm5j-hpgg 38.1.0
2026-04-01T12:48:39.541477+00:00 GitLab Importer Affected by VCID-sd2a-hmu2-wbax https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ckeditor4/CVE-2021-32809.yml 38.0.0