Search for packages
| purl | pkg:npm/ckeditor@4.13.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-cff2-8n98-fbdz
Aliases: CVE-2021-32808 GHSA-6226-h7ff-ch6c |
ckeditor is an open source WYSIWYG HTML editor with rich content support. A vulnerability has been discovered in the clipboard Widget plugin if used alongside the undo feature. The vulnerability allows a user to abuse undo functionality using malformed widget HTML, which could result in executing JavaScript code. It affects all users using the CKEditor 4 plugins listed above at version >= 4.13.0. The problem has been recognized and patched. The fix will be available in version 4.16.2. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-07-01T18:11:49.364984+00:00 | GitLab Importer | Affected by | VCID-cff2-8n98-fbdz | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/ckeditor/CVE-2021-32808.yml | 36.1.3 |