Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CLSA-2026-1784077492
  • TuxCare:npm/tinymce
 TuxCare security update for tinymce (3 CVEs) 04 Aug
  • Fix available
CLSA-2026-1783904630
  • TuxCare:npm/tinymce
 TuxCare security update for tinymce (3 CVEs) 04 Aug
  • Fix available
CLSA-2026-1781052744
  • TuxCare:npm/tinymce
 TuxCare security update for tinymce (4 CVEs) 04 Aug
  • Fix available
CLSA-2026-1777423184
  • TuxCare:npm/tinymce
 TuxCare security update for tinymce (13 CVEs) 04 Aug
  • Fix available
CLSA-2026-1777423186
  • TuxCare:npm/tinymce
 TuxCare security update for tinymce (4 CVEs) 04 Aug
  • Fix available
CLSA-2026-1775262593
  • TuxCare:npm/tinymce
 TuxCare security update for tinymce (1 CVE) 04 Aug
  • Fix available
PYSEC-2026-1301
  • PyPI/django-tinymce
 TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-1302
  • PyPI/django-tinymce
 TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements 07 Jul
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-632
  • PyPI/django-tinymce
 Cross-site scripting vulnerability in TinyMCE plugins 02 Jul
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-vg35-5wq7-3x7w
  • NuGet/TinyMCE
  • Packagist/tinymce/tinymce
  • npm/tinymce
 TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` injection 05 Jun
  • Fix available
  • Severity - 8.7 (High)
GHSA-v98h-vmpc-fpqv
  • NuGet/TinyMCE
  • Packagist/tinymce/tinymce
  • npm/tinymce
 TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comments 05 Jun
  • Fix available
  • Severity - 8.7 (High)
GHSA-q742-qvgc-gc2f
  • NuGet/TinyMCE
  • Packagist/tinymce/tinymce
  • npm/tinymce
 TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes 05 Jun
  • Fix available
  • Severity - 8.7 (High)
GHSA-mh5m-5hw4-5c69
  • NuGet/TinyMCE
  • Packagist/tinymce/tinymce
  • npm/tinymce
 TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs 05 Jun
  • Fix available
  • Severity - 8.7 (High)
UBUNTU-CVE-2026-47759
  • Ubuntu:16.04:LTS/tinymce
  • Ubuntu:18.04:LTS/tinymce
  • Ubuntu:20.04:LTS/tinymce
 See record for full details 28 May
  • No fix available
  • Severity - 8.7 (High)
UBUNTU-CVE-2026-47760
  • Ubuntu:16.04:LTS/tinymce
  • Ubuntu:18.04:LTS/tinymce
  • Ubuntu:20.04:LTS/tinymce
 See record for full details 28 May
  • No fix available
  • Severity - 8.7 (High)
UBUNTU-CVE-2026-47761
  • Ubuntu:16.04:LTS/tinymce
  • Ubuntu:18.04:LTS/tinymce
  • Ubuntu:20.04:LTS/tinymce
 See record for full details 28 May
  • No fix available
  • Severity - 8.7 (High)
Load more...