{"action":"Upgrade @ckeditor/ckeditor5-real-time-collaboration to 44.2.1 or later.","affected":[{"fixed":"44.2.1","introduced":"41.3.0"}],"component":"@ckeditor/ckeditor5-real-time-collaboration","cve_ids":["CVE-2025-25299"],"ecosystem":"npm","epss":0.00603,"exploited":false,"fixed_versions":["44.2.1"],"ghsa_id":"GHSA-j3mm-wmfm-mwvh","id":"tcs_01M5KFWQ2W232JJQEMKHP2BJ9F","modified_at":"2025-02-20T22:53:45Z","published_at":"2025-02-20T20:16:31Z","references":["https://osv.dev/vulnerability/GHSA-j3mm-wmfm-mwvh","https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-j3mm-wmfm-mwvh","https://nvd.nist.gov/vuln/detail/CVE-2025-25299","https://ckeditor.com/docs/ckeditor5/latest/features/collaboration/real-time-collaboration/real-time-collaboration.html","https://ckeditor.com/docs/ckeditor5/latest/features/collaboration/real-time-collaboration/real-time-collaboration.html?docId=ee1dca024c9b4e44aef039f99ebe6c664","https://github.com/ckeditor/ckeditor5","https://github.com/ckeditor/ckeditor5/releases/tag/v44.2.1"],"severity":{"label":"low","score":2.3},"sources":[{"source":"osv","source_id":"GHSA-j3mm-wmfm-mwvh","url":"https://osv.dev/vulnerability/GHSA-j3mm-wmfm-mwvh"},{"source":"nvd","source_id":"CVE-2025-25299","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-25299"}],"summary":"Cross-site scripting (XSS) in the CKEditor 5 real-time collaboration package"}