{"action":"Upgrade suneditor to 2.47.11 or later.","affected":[{"fixed":"2.47.11","introduced":"0"}],"component":"suneditor","cve_ids":["CVE-2026-59167"],"ecosystem":"npm","epss":0.00499,"exploited":false,"fixed_versions":["2.47.11"],"ghsa_id":"GHSA-6rf4-v2fh-m6p4","id":"tcs_01M5KF7WW5883DQQGMKFZBYERH","modified_at":"2026-09-24T15:15:04.678929908Z","published_at":"2026-09-24T14:57:55Z","references":["https://osv.dev/vulnerability/GHSA-6rf4-v2fh-m6p4","https://github.com/JiHong88/suneditor/security/advisories/GHSA-6rf4-v2fh-m6p4","https://nvd.nist.gov/vuln/detail/CVE-2026-59167","https://github.com/JiHong88/suneditor/issues/1646","https://github.com/JiHong88/suneditor/commit/a94ace269c7102bfb6de58a27a6547bc4eb09045","https://github.com/JiHong88/suneditor","https://github.com/JiHong88/suneditor/releases/tag/2.47.11"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-6rf4-v2fh-m6p4","url":"https://osv.dev/vulnerability/GHSA-6rf4-v2fh-m6p4"}],"summary":"SunEditor: Critical XSS vulnerability - sanitizer bypass"}