npm/@editorjs/editorjs CVE-2022-23474: medium 6.1, EPSS 0.57%

Editor.js vulnerable to Code Injection

Action: Upgrade @editorjs/editorjs to 2.26.0 or later.

npm i @editorjs/editorjs@2.26.0

Affected

Fixed versions

Sources

• osv: GHSA-6mvj-2569-3mcm
• https://nvd.nist.gov/vuln/detail/CVE-2022-23474
• https://github.com/codex-team/editor.js/pull/2100
• https://github.com/codex-team/editor.js/commit/f659015be6de8e6f0c322c5ff4d1a4532d2f29a2
• https://github.com/codex-team/editor.js
• https://securitylab.github.com/advisories
• https://securitylab.github.com/advisories/GHSL-2022-028_codex-team_editor_js

CVE-2022-23474 · published 2024-08-05T21:18:57Z · modified 2024-08-05T21:41:56.361300Z · JSON