npm/@ckeditor/ckeditor5-font CVE-2021-21391: medium 6.5, EPSS 1.67%
Regular expression Denial of Service in multiple packages
Action: Upgrade @ckeditor/ckeditor5-font to 27.0.0 or later.
npm i @ckeditor/ckeditor5-font@27.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 27.0.0 | - |
Fixed versions
| 27.0.0 |
Sources
- osv: GHSA-3rh3-wfr4-76mj#npm/@ckeditor/ckeditor5-font
- https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-3rh3-wfr4-76mj
- https://nvd.nist.gov/vuln/detail/CVE-2021-21391
- https://github.com/ckeditor/ckeditor5/releases/tag/v27.0.0
- https://www.npmjs.com/package/@ckeditor/ckeditor5-engine
- https://www.npmjs.com/package/@ckeditor/ckeditor5-font
- https://www.npmjs.com/package/@ckeditor/ckeditor5-image
- https://www.npmjs.com/package/@ckeditor/ckeditor5-list
- https://www.npmjs.com/package/@ckeditor/ckeditor5-markdown-gfm
- https://www.npmjs.com/package/@ckeditor/ckeditor5-media-embed
- https://www.npmjs.com/package/@ckeditor/ckeditor5-paste-from-office
- https://www.npmjs.com/package/@ckeditor/ckeditor5-widget
CVE-2021-21391 · published · modified · JSON