@atlaskit/editor-core

@atlaskit/editor-core

NPMNPM
NPMwww.npmjs.com
bitbucket.orgbitbucket.org
Releases3.92K
Frequency21 hours 12 minutes
Last Release
A package contains Atlassian editor core functionality
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2019-20903NVD↗
< 113.1.5, all versions5.4 MEDIUM3.5 LOW

The hyperlinks functionality in atlaskit/editor-core in before version 113.1.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in link targets.