Packagist/drupal/core CVE-2022-24728, CVE-2022-24729: unknown, EPSS 1.20%

The Drupal project uses the [CKEditor](https://github.com/ckeditor/ckeditor4) library for WYSIWYG editing. CKEditor has released [a security update that impacts Drupal](https://ckeditor.com/blog/ckedi

Action: Upgrade drupal/core to 9.2.15 or later.

composer require drupal/core:9.2.15

composer require drupal/core:9.3.8

Affected

introduced	fixed	last affected
8.0.0	9.2.15	-
9.3.0	9.3.8	-

Fixed versions

9.2.15

9.3.8

Sources

osv: DRUPAL-CORE-2022-005
https://www.drupal.org/sa-core-2022-005

CVE-2022-24728, CVE-2022-24729 · published 2022-03-16T16:10:34Z · modified 2026-09-19T18:10:19Z · JSON