https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:55:20.880795+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-01665 bdu:2022-01665 2026-10-04T11:55:20.885111+00:00 bdu:2022-01665 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0992 certfr-2024-avi-0992 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-04T11:55:20.885145+00:00 certfr-2024-avi-0992 https://cve.radiocsirt.org/vuln/euvd-2026-28151 EUVD-2026-28151 2026-10-04T11:55:20.885164+00:00 EUVD-2026-28151 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32808 fkie_cve-2021-32808 2026-10-04T11:55:20.885176+00:00

ckeditor is an open source WYSIWYG HTML editor with rich content support. A vulnerability has been discovered in the clipboard Widget plugin if used alongside the undo feature. The vulnerability allows a user to abuse undo functionality using malformed widget HTML, which could result in executing JavaScript code. It affects all users using the CKEditor 4 plugins listed above at version >= 4.13.0. The problem has been recognized and patched. The fix will be available in version 4.16.2.

 https://cve.radiocsirt.org/vuln/ghsa-6226-h7ff-ch6c GHSA-6226-h7ff-ch6c — Widget feature vulnerability allowing to execute JavaScript code using undo functionality 2026-10-04T11:55:20.885205+00:00

Affected: npm: ckeditor4

### Affected packages The vulnerability has been discovered in [Widget](https://ckeditor.com/cke4/addon/clipboard) plugin if used alongside [Undo](https://ckeditor.com/cke4/addon/undo) feature.

### Impact A potential vulnerability has been discovered in CKEditor 4 [Widget](https://ckeditor.com/cke4/addon/widget) package. The vulnerability allowed to abuse undo functionality using malformed widget HTML, which could result in executing JavaScript code. It affects all users using the CKEditor 4 plugins listed above at version >= 4.13.0.

### Patches The problem has been recognized and patched. The fix will be available in version 4.16.2.

### For more information Email us at security@cksource.com if you have any questions or comments about this advisory.

### Acknowledgements The CKEditor 4 team would like to thank Anton Subbotin ([skavans](https://github.com/skavans)) for recognizing and reporting this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2021-32808 gsd-2021-32808 2026-10-04T11:55:20.885237+00:00 gsd-2021-32808 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-32808 Withdrawn: UBUNTU-CVE-2021-32808 2026-10-04T11:55:20.885249+00:00

Withdrawn by the publisher.

Affected: Ubuntu:22.04:LTS: ckeditor

ckeditor is an open source WYSIWYG HTML editor with rich content support. A vulnerability has been discovered in the clipboard Widget plugin if used alongside the undo feature. The vulnerability allows a user to abuse undo functionality using malformed widget HTML, which could result in executing JavaScript code. It affects all users using the CKEditor 4 plugins listed above at version >= 4.13.0. The problem has been recognized and patched. The fix will be available in version 4.16.2.