Aikido Intel
Secure My Code
Package Health

prosemirror-view

ProseMirror's view component

Latest 1.42.6NPMNPM

84%

Total Score

healthy

Healthy: 15 releases in the last year and a stable, non-prerelease version indicate active maintenance.

Are you affected? Scan for Free

Health Score Breakdown

Build provenancecaution

No build attestation, trusted publisher identity, or staged publishing is recorded, leaving the release's build origin less verifiable.

Lifecycle scriptscaution

A prepare script runs during installation, adding execution and reproducibility risk even though this may be a normal build step.

Vulnerabilities

TitleVersionsSeverity
CVE-2026-104847 New
prosemirror-view is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 1.42.3.
0.0.0 - 1.42.3
High
AIKIDO-2024-10190 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
prosemirror-view is vulnerable to Cross-site Scripting (XSS) in versions 0.14.0 - 1.33.8.
0.14.0 - 1.33.8
Low

Package versions

Maintainers

marijn

Direct Dependencies

DependencyLast ReleaseScore
prosemirror-model
Version ^1.25.12
—
—
prosemirror-state
Version ^1.0.0
—
—
prosemirror-transform
Version ^1.1.0
—
—

Weekly Downloads

Info

Last Published
16 days ago
Created
10 years ago
Unpacked Size
0.9 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Scan for Free
Book a Demo

Free. No credit card required.

Aikido Platform
Subscribe
Stay up to date with all updates

I consent to receiving marketing communications based on Aikido’s Privacy Policy.

LinkedIn YouTube X
© 2026 Aikido Security BV | BE0792914919
Ghent, Belgium | San Francisco, US
SOC 2SOC 2Compliant
ISO 27001ISO 27001Compliant
ISO 42001ISO 42001Compliant
FedRAMPFedRAMPImplementing

© All Intel data is openly available and commercially licensed.