ProseMirror vulnerabilities
We track 1 vulnerability in ProseMirror products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 2, 2026.
1vulnerabilities
0critical
1high
0exploited
8.5average CVSS score
Latest ProseMirror vulnerabilities
- 8.5 High severity
prosemirror-view: Improper Neutralization of Input During Web Page Generation
ProseMirror's view component renders and manages the editable browser interface for ProseMirror documents. Prior to 1.42.3, prosemirror-view paste handling accepts attacker-provided HTML whose clipboard slice context contains attributes that are not passed thr