npm/@ckeditor/ckeditor5-clipboard CVE-2025-58064: low 2.3, EPSS 0.42%
CKEditor 5 cross-site scripting (XSS) vulnerability in the clipboard package
Action: Upgrade @ckeditor/ckeditor5-clipboard to 45.2.2 or later.
npm i @ckeditor/ckeditor5-clipboard@45.2.2npm i @ckeditor/ckeditor5-clipboard@46.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 44.2.0 | 45.2.2 | - |
| 46.0.0 | 46.0.3 | - |
Fixed versions
| 45.2.2 | 46.0.3 |
Sources
- osv: GHSA-x9gp-vjh6-3wv6#npm/@ckeditor/ckeditor5-clipboard
- nvd: CVE-2025-58064
- https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-x9gp-vjh6-3wv6
- https://github.com/ckeditor/ckeditor5/commit/b210e90c6cf84e662ef6c7daf93a92355a961bf2
- https://github.com/ckeditor/ckeditor5
CVE-2025-58064 · published · modified · JSON