ckeditor5

A set of ready-to-use rich text editors created with a powerful framework. Made with real-time collaborative editing in mind.

Latest 49.0.0

NPM

95%

Total Score

healthy

Active releases and broad organization-backed maintenance make CKEditor 5 a strong dependency.

Are you affected? Scan for Free

Health Score Breakdown

Build provenance

No build attestation is present, so the release offers less independently verifiable publication provenance despite reporting CircleCI as the trusted publisher identity.

Vulnerabilities

Title	Versions	Severity
CVE-2025-58064 ckeditor5 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 46.0.0 - 46.0.3 and 44.2.0 - 45.2.2.	44.2.0 - 45.2.246.0.0 - 46.0.3	Low
CVE-2024-45613 ckeditor5 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 40.0.0 - 43.1.1.	40.0.0 - 43.1.1	High
CVE-2022-48110 ckeditor5 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 36.0.0.	0.0.0 - 36.0.0	Medium

Package versions

Maintainers

ckeditor

Direct Dependencies

Dependency	Last Release	Score
@ckeditor/ckeditor5-ui Version 49.0.0	—	—
@ckeditor/ckeditor5-core Version 49.0.0	—	—
@ckeditor/ckeditor5-font Version 49.0.0	—	—
@ckeditor/ckeditor5-link Version 49.0.0	—	—
@ckeditor/ckeditor5-list Version 49.0.0	—	—