Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-33829
6.1
MEDIUMCVSS v3
Published
June 9, 2021
CVSS v2
4.3 MEDIUM
Affected
8 projects
Assigned by
MITRE
Severity scale
010
Description
A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attackers to inject executable JavaScript code through a crafted comment because --!> is mishandled.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.>= 9.1.0, < 9.1.9, >= 9.0.0, < 9.0.14, >= 8.9.0, < 8.9.16NVD
drupal
RubyGemsComing Soon! This gem is in development - Dont use it, Drupal integration with rails app
RubyGemsComing Soon! This gem is in development - Dont use it, Drupal integration with rails app>= 9.1.0, < 9.1.9, >= 9.0.0, < 9.0.14, >= 8.9.0, < 8.9.16NVD
NPM
Crates.io
Docker Hub