Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:npm/%40ckeditor/ckeditor5-html-support@46.0.1-alpha.8
Typenpm
Namespace@ckeditor
Nameckeditor5-html-support
Version46.0.1-alpha.8
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version47.6.0
Latest_non_vulnerable_version47.6.0
Affected_by_vulnerabilities
0
url VCID-yvty-kbbz-kkhb
vulnerability_id VCID-yvty-kbbz-kkhb
summary 
CKEditor 5 has Cross-site Scripting (XSS) in the HTML Support package
A Cross-Site Scripting (XSS) vulnerability has been discovered in the General HTML Support feature. This vulnerability could be triggered by inserting specially crafted markup, leading to unauthorized JavaScript code execution, if the editor instance used an unsafe General HTML Support configuration.

This vulnerability affects only installations where the editor configuration meets the following criteria:
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-28343
reference_id
reference_type
scores
0
value 0.00049
scoring_system epss
scoring_elements 0.15777
published_at 2026-06-07T12:55:00Z
1
value 0.00049
scoring_system epss
scoring_elements 0.1571
published_at 2026-06-09T12:55:00Z
2
value 0.00049
scoring_system epss
scoring_elements 0.15691
published_at 2026-06-08T12:55:00Z
3
value 0.00049
scoring_system epss
scoring_elements 0.15817
published_at 2026-06-06T12:55:00Z
4
value 0.00049
scoring_system epss
scoring_elements 0.15827
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-28343
1
reference_url https://github.com/ckeditor/ckeditor5
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ckeditor/ckeditor5
2
reference_url https://github.com/ckeditor/ckeditor5/releases/tag/v29.0.0
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-06T17:56:09Z/
url https://github.com/ckeditor/ckeditor5/releases/tag/v29.0.0
3
reference_url https://github.com/ckeditor/ckeditor5/releases/tag/v47.6.0
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-06T17:56:09Z/
url https://github.com/ckeditor/ckeditor5/releases/tag/v47.6.0
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-28343
reference_id CVE-2026-28343
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-28343
5
reference_url https://github.com/advisories/GHSA-jrqm-vmqc-gm93
reference_id GHSA-jrqm-vmqc-gm93
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-jrqm-vmqc-gm93
6
reference_url https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-jrqm-vmqc-gm93
reference_id GHSA-jrqm-vmqc-gm93
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-06T17:56:09Z/
url https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-jrqm-vmqc-gm93
fixed_packages
0
url pkg:npm/%40ckeditor/ckeditor5-html-support@47.6.0
purl pkg:npm/%40ckeditor/ckeditor5-html-support@47.6.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540ckeditor/ckeditor5-html-support@47.6.0
aliases CVE-2026-28343, GHSA-jrqm-vmqc-gm93
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yvty-kbbz-kkhb
Fixing_vulnerabilities
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/%2540ckeditor/ckeditor5-html-support@46.0.1-alpha.8