https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T06:23:45.835730+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-23474 CVE-2022-23474 — editor.js contains Code Injection 2026-10-24T06:23:45.836822+00:00

Affected: codex-team editor.js

Editor.js is a block-style editor with clean JSON output. Versions prior to 2.26.0 are vulnerable to Code Injection via pasted input. The processHTML method passes pasted input into wrapper’s innerHTML. This issue is patched in version 2.26.0.