Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
Vulnerabilities
search
All ecosystems
2202748
AlmaLinux
5928
Alpaquita
16087
Alpine
4608
Android
3677
Azure Linux
17638
BellSoft Hardened Containers
754
Bitnami
9325
Chainguard
1025208
CleanStart
3846
CRAN
14
crates.io
2738
Debian
68438
Echo
7449
GHC
3
GIT
108202
GitHub Actions
55
Go
9243
Hackage
32
Hex
364
Julia
1713
Linux
29974
Mageia
6231
Maven
7044
MinimOS
144569
npm
228783
NuGet
1869
opam
29
openEuler
8800
openSUSE
14455
OSS-Fuzz
4013
Packagist
7095
Pub
11
PyPI
25178
Red Hat
23355
Rocky Linux
4303
Root
19566
RubyGems
5326
SUSE
23235
SwiftURL
60
TuxCare
9559
Ubuntu
65386
VSCode
21
Wolfi
288564
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-5359-pvf2-pw78
NuGet/TinyMCE
Packagist/tinymce/tinymce
npm/tinymce
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements
26 Mar 2024
Fix available
Severity - 4.3 (Medium)
CLEANSTART-2026-QW90668
CleanStart/thingsboard-tb-web-ui
Security fix for ghsa-5359-pvf2-pw78 applied in: thingsboard-tb-web-ui 4.3.0.1-r0
18 Sep
Fix available
CVE-2024-29881
github.com/tinymce/tinymce
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements
26 Mar 2024
Fix available
Severity - 4.3 (Medium)
Vulnerability Database - OSV