GitHub Advisoryadvisory · Packagist

GHSA-cfcv-q4qq-2ph4 CKEditor 4 vulnerabilities in versions <4.16.1

MEDIUM Published 2021-08-23 Modified 2021-10-08 Official page ↗

Ecosystem: Packagist
Packages: pimcore/pimcore
Severity: Moderate
Reviewed: 2021-08-23

Affected packages

• Packagist pimcore/pimcore: < 10.1.1 → fixed in 10.1.1

Description

Details see: https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-m94c-37g6-cjhc ( CVE-2021-37695 ) https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-6226-h7ff-ch6c ( CVE-2021-32808 ) https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-7889-rm5j-hpgg ( CVE-2021-32809 ) Patch: https://github.com/pimcore/pimcore/pull/10032

References