npm/ckeditor4-dev CVE-2021-26271: medium 6.5, EPSS 1.99%
CKEditor 4 ReDoS Vulnerability
Action: Upgrade ckeditor4-dev to 4.16 or later.
npm i ckeditor4-dev@4.16Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.16 | - |
Fixed versions
| 4.16 |
Sources
- osv: GHSA-jv4c-7jqq-m34x
- https://nvd.nist.gov/vuln/detail/CVE-2021-26271
- https://github.com/ckeditor/ckeditor4
- https://github.com/ckeditor/ckeditor4/blob/major/CHANGES.md#ckeditor-416
- https://web.archive.org/web/20210128132707/https://ckeditor.com/blog/CKEditor-4.16-with-improved-image-pasting-High-Contrast-support-and-a-new-color-API/#security-comes-first
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuoct2021.html
CVE-2021-26271 · published · modified · JSON