CVE-2025-58064
2 advisories.
npm/ckeditor5 CVE-2025-58064: low
CKEditor 5 cross-site scripting (XSS) vulnerability in the clipboard package
Action: Upgrade ckeditor5 to 45.2.2 or later.
npm i ckeditor5@46.0.3npm i ckeditor5@45.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 46.0.0 | 46.0.3 | - |
| 44.2.0 | 45.2.2 | - |
Fixed versions
| 46.0.3 | 45.2.2 |
Sources
- osv: GHSA-x9gp-vjh6-3wv6
- https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-x9gp-vjh6-3wv6
- https://nvd.nist.gov/vuln/detail/CVE-2025-58064
- https://github.com/ckeditor/ckeditor5/commit/b210e90c6cf84e662ef6c7daf93a92355a961bf2
- https://github.com/ckeditor/ckeditor5
CVE-2025-58064 · published · modified · JSON
npm/@ckeditor/ckeditor5-clipboard CVE-2025-58064: low
CKEditor 5 cross-site scripting (XSS) vulnerability in the clipboard package
Action: Upgrade @ckeditor/ckeditor5-clipboard to 45.2.2 or later.
npm i @ckeditor/ckeditor5-clipboard@45.2.2npm i @ckeditor/ckeditor5-clipboard@46.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 44.2.0 | 45.2.2 | - |
| 46.0.0 | 46.0.3 | - |
Fixed versions
| 45.2.2 | 46.0.3 |
Sources
- osv: GHSA-x9gp-vjh6-3wv6#npm/@ckeditor/ckeditor5-clipboard
- https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-x9gp-vjh6-3wv6
- https://nvd.nist.gov/vuln/detail/CVE-2025-58064
- https://github.com/ckeditor/ckeditor5/commit/b210e90c6cf84e662ef6c7daf93a92355a961bf2
- https://github.com/ckeditor/ckeditor5
CVE-2025-58064 · published · modified · JSON