CVE-2025-46812
1 advisory.
npm/trix CVE-2025-46812: low, EPSS 0.72%
Trix vulnerable to Cross-site Scripting on copy & paste
Action: Upgrade trix to 2.1.15 or later.
npm i trix@2.1.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.15 | - |
Fixed versions
| 2.1.15 |
Sources
- osv: GHSA-mcrw-746g-9q8h
- https://github.com/basecamp/trix/security/advisories/GHSA-mcrw-746g-9q8h
- https://nvd.nist.gov/vuln/detail/CVE-2025-46812
- https://github.com/basecamp/trix/commit/75226089646841b0f774d8b152e5ec27d2d9e191
- https://github.com/basecamp/trix
CVE-2025-46812 · published · modified · JSON