https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 15:51:02 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-238588 EUVD-2026-238588 https://cve.radiocsirt.org/vuln/euvd-2026-238588 https://cve.radiocsirt.org/vuln/fkie_cve-2025-46812 <p>Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Versions prior to 2.1.15 are vulnerable to XSS attacks when pasting malicious code. An attacker could trick a user to copy and paste malicious code that would execute arbitrary JavaScript code within the context of the user&#39;s session, potentially leading to unauthorized actions being performed or sensitive information being disclosed. This issue has been patched in version 2.1.15.</p> <p>Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Versions prior to 2.1.15 are vulnerable to XSS attacks when pasting malicious code. An attacker could trick a user to copy and paste malicious code that would execute arbitrary JavaScript code within the context of the user&#39;s session, potentially leading to unauthorized actions being performed or sensitive information being disclosed. This issue has been patched in version 2.1.15.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-46812 https://cve.radiocsirt.org/vuln/ghsa-mcrw-746g-9q8h <p><strong>Affected:</strong> npm: trix</p> <p>### Impact The Trix editor, in versions prior to 2.1.15, is vulnerable to XSS attacks when pasting malicious code.</p> <p>An attacker could trick a user to copy and paste malicious code that would execute arbitrary JavaScript code within the context of the user&#39;s session, potentially leading to unauthorized actions being performed or sensitive information being disclosed.</p> <p>### Patches Update Recommendation: Users should upgrade to Trix editor version 2.1.15 or later.</p> <p>### References The XSS vulnerability was reported by HackerOne researcher [hiumee](https://hackerone.com/hiumee?type=user).</p> <p><strong>Affected:</strong> npm: trix</p> <p>### Impact The Trix editor, in versions prior to 2.1.15, is vulnerable to XSS attacks when pasting malicious code.</p> <p>An attacker could trick a user to copy and paste malicious code that would execute arbitrary JavaScript code within the context of the user&#39;s session, potentially leading to unauthorized actions being performed or sensitive information being disclosed.</p> <p>### Patches Update Recommendation: Users should upgrade to Trix editor version 2.1.15 or later.</p> <p>### References The XSS vulnerability was reported by HackerOne researcher [hiumee](https://hackerone.com/hiumee?type=user).</p> https://cve.radiocsirt.org/vuln/ghsa-mcrw-746g-9q8h