CVE-2018-11093

npm/@ckeditor/ckeditor5-link CVE-2018-11093: medium 6.1, EPSS 1.00%

Cross-Site Scripting in @ckeditor/ckeditor5-link

Action: Upgrade @ckeditor/ckeditor5-link to 10.0.1 or later.

npm i @ckeditor/ckeditor5-link@10.0.1

Affected

Fixed versions

Sources

• osv: GHSA-gvpx-9459-w3mj
• https://nvd.nist.gov/vuln/detail/CVE-2018-11093
• https://github.com/ckeditor/ckeditor5-link/commit/8cb782eceba10fc481e4021cb5d25b2a85d1b04e
• https://ckeditor.com/blog/CKEditor-5-v10.0.1-released
• https://github.com/advisories/GHSA-gvpx-9459-w3mj
• https://github.com/ckeditor/ckeditor5-link
• https://github.com/ckeditor/ckeditor5-link/blob/master/CHANGELOG.md#1001-2018-05-22
• https://snyk.io/vuln/SNYK-JS-CKEDITORCKEDITOR5LINK-72892
• https://www.npmjs.com/advisories/1154

CVE-2018-11093 · published 2018-05-23T20:37:46Z · modified 2023-11-08T03:59:45.405001Z · JSON