Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/froala-editor@4.0.1
purl pkg:npm/froala-editor@4.0.1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-2gd6-6ak2-gycd
Aliases:
CVE-2020-22864
GHSA-97x5-cc53-cv4v
4.0.11
Affected by 2 other vulnerabilities.
VCID-dteb-y9ag-rqb5
Aliases:
CVE-2023-41592
GHSA-hvpq-7vcc-5hj5
Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability.
4.1.4
Affected by 1 other vulnerability.
VCID-nkyp-rjkb-2qcc
Aliases:
CVE-2024-51434
GHSA-549p-5c7f-c5p4
Inconsistent <plaintext> tag parsing allows for XSS in Froala WYSIWYG editor 4.3.0 and earlier. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T19:46:16.529881+00:00 GitLab Importer Affected by VCID-nkyp-rjkb-2qcc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/froala-editor/CVE-2024-51434.yml 38.6.0
2026-06-12T17:50:04.855583+00:00 GitLab Importer Affected by VCID-2gd6-6ak2-gycd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/froala-editor/CVE-2020-22864.yml 38.6.0
2026-06-12T15:47:00.653961+00:00 GitLab Importer Affected by VCID-dteb-y9ag-rqb5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/froala-editor/CVE-2023-41592.yml 38.6.0