npm/@ckeditor/ckeditor5-clipboard CVE-2024-45613: high 7.2, EPSS 0.52%
Cross-site scripting (XSS) in the clipboard package
Action: Upgrade @ckeditor/ckeditor5-clipboard to 43.1.1 or later.
npm i @ckeditor/ckeditor5-clipboard@43.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 40.0.0 | 43.1.1 | - |
Fixed versions
| 43.1.1 |
Sources
- osv: GHSA-rgg8-g5x8-wr9v#npm/@ckeditor/ckeditor5-clipboard
- https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-rgg8-g5x8-wr9v
- https://nvd.nist.gov/vuln/detail/CVE-2024-45613
- https://github.com/ckeditor/ckeditor5
- https://github.com/ckeditor/ckeditor5/releases/tag/v43.1.1
CVE-2024-45613 · published · modified · JSON