Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/ckeditor@4.5.2
purl pkg:npm/ckeditor@4.5.2
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-sd2a-hmu2-wbax
Aliases:
CVE-2021-32809
GHSA-7889-rm5j-hpgg
Code Injection ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEdit The vulnerability allowed to abuse paste functionality using malformed HTML, which could result in injecting arbitrary HTML into the editor.
4.16.2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:48:39.494517+00:00 GitLab Importer Affected by VCID-sd2a-hmu2-wbax https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ckeditor/CVE-2021-32809.yml 38.0.0