Skip to content

Product

editorjs @editorjs/editorjs vulnerabilities

1 published CVE affecting editorjs @editorjs/editorjs, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest editorjs @editorjs/editorjs CVEs

Newest publication first

  1. CVE-2022-23474 editor.js contains Code Injection

    Published
    MediumCVSS 6.1

    Editor.js is a block-style editor with clean JSON output. Versions prior to 2.26.0 are vulnerable to Code Injection via pasted input. The processHTML method passes pasted input into wrapper’s innerHTML. This issue is patched in version 2.26.0.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.