Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
Vulnerabilities
search
All ecosystems
2230377
AlmaLinux
5964
Alpaquita
16124
Alpine
4635
Android
3677
Azure Linux
17766
BellSoft Hardened Containers
762
Bitnami
9476
Chainguard
1042229
CleanStart
5179
CRAN
14
crates.io
2746
Debian
68788
Echo
7618
GHC
3
GIT
108628
GitHub Actions
55
Go
9254
Hackage
33
Hex
364
Julia
1713
Linux
29975
Mageia
6233
Maven
7048
MinimOS
147097
npm
229049
NuGet
1869
opam
29
openEuler
8900
openSUSE
14509
OSS-Fuzz
4015
Packagist
7100
Pub
11
PyPI
25414
Red Hat
23452
Rocky Linux
4328
Root
19620
RubyGems
5326
SUSE
23401
SwiftURL
60
TuxCare
9722
Ubuntu
65803
VSCode
21
Wolfi
292367
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-5359-pvf2-pw78
NuGet/TinyMCE
Packagist/tinymce/tinymce
npm/tinymce
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements
26 Mar 2024
Fix available
Severity - 4.3 (Medium)
CLEANSTART-2026-QW90668
CleanStart/thingsboard-tb-web-ui
Security fix for ghsa-5359-pvf2-pw78 applied in: thingsboard-tb-web-ui 4.3.0.1-r0
18 Sep
Fix available
CVE-2024-29881
github.com/tinymce/tinymce
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements
26 Mar 2024
Fix available
Severity - 4.3 (Medium)
Vulnerability Database - OSV