Ckeditor5 vulnerabilities

1 known vulnerability in Ckeditor5 from Ckeditor. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  ckeditor5: Improper Neutralization of Input During Web Page Generation

  CVE-2026-116688Oct 27, 2026Ckeditor

  CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 45.0.0 until 47.7.4 and 48.5.1, the engine uses a vulnerable es-toolkit version whose prototype-pollution behavior can be reached while CKEditor processes incoming style attribut