npm/ckeditor5 CVE-2025-58064: low 2.3, EPSS 0.42%
CKEditor 5 cross-site scripting (XSS) vulnerability in the clipboard package
Action: Upgrade ckeditor5 to 45.2.2 or later.
npm i ckeditor5@46.0.3npm i ckeditor5@45.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 46.0.0 | 46.0.3 | - |
| 44.2.0 | 45.2.2 | - |
Fixed versions
| 46.0.3 | 45.2.2 |
Sources
- osv: GHSA-x9gp-vjh6-3wv6
- nvd: CVE-2025-58064
- https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-x9gp-vjh6-3wv6
- https://github.com/ckeditor/ckeditor5/commit/b210e90c6cf84e662ef6c7daf93a92355a961bf2
- https://github.com/ckeditor/ckeditor5
CVE-2025-58064 · published · modified · JSON