prosemirror_to_html vulnerabilities

1 known vulnerability in prosemirror_to_html from Etaminstudio. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.6 High severity

  prosemirror_to_html: Improper Neutralization of Input During Web Page Generation

  CVE-2025-64501Nov 10, 2025Etaminstudio

  ProsemirrorToHtml is a JSON converter which takes ProseMirror-compatible JSON and outputs HTML. In versions 0.2.0 and below, the `prosemirror_to_html` gem is vulnerable to Cross-Site Scripting (XSS) attacks through malicious HTML attribute values. While tag co