`tinymce`

Ecosystem:
npm

Package URL:
pkg:npm/tinymce

Total PRs:
311 Dependabot PRs

Latest PR:
12 days ago

Unique Repositories:
117 repositories

Unique Repos (30 days):
5 repositories

Security Advisories

XSS in TinyMCE

GHSA-c78w-2gw7-gjv3 CVE-2019-1010091 MODERATE published about 6 years ago • updated about 9 hours ago

### Impact A cross-site scripting (XSS) vulnerability was discovered in: the core parser and `media` plugin. The vulnerability allowed arbitrary Ja...

TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs

GHSA-mh5m-5hw4-5c69 CVE-2026-47760 HIGH published 12 days ago • updated 2 days ago

### Impact TinyMCE 6.8.x contains an XSS vulnerability caused by improper SVG namespace scope handling in the sanitizer. A crafted payload using ne...

TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option

GHSA-9hcv-j9pv-qmph CVE-2024-38356 MODERATE published almost 2 years ago • updated about 3 hours ago

### Impact A [cross-site scripting (XSS)](https://owasp.org/www-community/attacks/xss/) vulnerability was discovered in TinyMCE’s content extractio...

Cross-site scripting vulnerability in TinyMCE

GHSA-5h9g-x5rv-25wg CVE-2024-21908 MODERATE published over 4 years ago • updated 10 days ago

### Impact A cross-site scripting (XSS) vulnerability was discovered in the schema validation logic of the core parser. The vulnerability allowed a...

Regex denial of service vulnerability in codesample plugin

GHSA-h96f-fc7c-9r55 LOW published over 5 years ago • updated about 9 hours ago

### Impact A regex denial of service (ReDoS) vulnerability was discovered in a dependency of the `codesample` plugin. The vulnerability allowed poo...

View all 20 advisories

Recent PRs

Bump tinymce from 7.9.1 to 7.9.3

7.9.1 → 7.9.3 Patch PR

Open 12 days ago 1 comment

chore(deps): bump tinymce from 5.10.5 to 5.10.9

open-condo-software/condo #7708

5.10.5 → 5.10.9 Patch PR

Closed 12 days ago 2 comments

Bump tinymce from 6.8.6 to 7.2.0 in /web

longhornopen/qualtrics-lti #42

6.8.6 → 7.2.0 Major PR

Closed 12 days ago 1 comment

Bump the npm_and_yarn group across 3 directories with 4 updates

Automattic/wp-calypso #111206

5.10.9 → 7.2.0 Major PR

Open 20 days ago 4 comments

chore(deps): bump tinymce from 8.5.0 to 8.5.1

AlchemyCMS/alchemy_cms #3906

8.5.0 → 8.5.1 Patch PR

Open 29 days ago 1 comment

build(deps): bump the non-breaking-changes group across 1 directory with 79 updates

cilangzzz/yudao-skills-ui-admin-vben #31

8.3.2 → 8.5.0 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump tinymce from 8.4.0 to 8.5.0

AlchemyCMS/alchemy_cms #3868

8.4.0 → 8.5.0 Minor PR

Open about 2 months ago 1 comment

Bump tinymce and @league-of-foundry-developers/foundry-vtt-types in /module

AlexDickerson/foundry-mcp #7

6.8.6 → 7.9.2 Major PR

Closed 2 months ago 4 comments

build(deps): bump tinymce from 6.8.6 to 8.3.2

elabftw/elabftw #6551

6.8.6 → 8.3.2 Major PR

Closed 4 months ago 2 comments

chore(deps): bump tinymce from 8.3.1 to 8.3.2

AlchemyCMS/alchemy_cms #3706

8.3.1 → 8.3.2 Patch PR

Open 4 months ago 4 comments

Bump the npm_and_yarn group across 2 directories with 8 updates

ai-developers-ng/listmonk #4

5.10.9 → 7.2.0 Major PR

Open 4 months ago 1 comment

⬆️ Bump tinymce from 5.10.9 to 7.9.2

ministryofjustice/ndelius-new-tech #533

5.10.9 → 7.9.2 Major PR

Closed 4 months ago 2 comments

Bump the all-ui-deps group across 1 directory with 80 updates

craftercms/studio-ui #4775

7.2.0 → 8.3.2 Major PR

Closed 5 months ago 2 comments

Bump the all-ui-deps group across 1 directory with 79 updates

craftercms/studio-ui #4770

7.2.0 → 8.3.2 Major PR

Closed 5 months ago 2 comments

Bump the all-ui-deps group across 1 directory with 77 updates

craftercms/studio-ui #4765

7.2.0 → 8.3.2 Major PR

Closed 5 months ago 2 comments

Bump the all-ui-deps group across 1 directory with 76 updates

craftercms/studio-ui #4760

7.2.0 → 8.3.2 Major PR

Closed 5 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 9 updates

trizist/pia #10

4.9.11 → 7.2.0 Major PR

Open 5 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 77 updates

craftercms/studio-ui #4754

7.2.0 → 8.3.2 Major PR

Open 5 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 87 updates

phuongnq/studio-ui #100

8.0.2 → 8.3.2 Minor PR

Closed 5 months ago 1 comment

Bump tinymce from 5.10.9 to 8.3.1

skaut/SRS #1544

5.10.9 → 8.3.1 Major PR

Closed 6 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 52 updates

craftercms/studio-ui #4732

8.2.1 → 8.3.1 Minor PR

Closed 6 months ago 1 comment

chore(deps): bump tinymce from 8.0.2 to 8.3.1

Sumant3086/PlayCast #44

8.0.2 → 8.3.1 Minor PR

Closed 6 months ago 1 comment

Bump tinymce from 8.3.0 to 8.3.1

evertjanMlbrgn/laravel-form-components #18

8.3.0 → 8.3.1 Patch PR

Closed 6 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 51 updates

craftercms/studio-ui #4730

8.2.1 → 8.3.1 Minor PR

Closed 6 months ago 1 comment

chore(deps): bump tinymce from 8.0.2 to 8.3.0

Sumant3086/PlayCast #43

8.0.2 → 8.3.0 Minor PR

Closed 6 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 43 updates

craftercms/studio-ui #4723

8.2.1 → 8.2.2 Patch PR

Closed 6 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 40 updates

craftercms/studio-ui #4721

8.2.1 → 8.2.2 Patch PR

Closed 6 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 31 updates

craftercms/studio-ui #4718

8.2.1 → 8.2.2 Patch PR

Closed 7 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 66 updates

craftercms/studio-ui #4702

8.0.2 → 8.2.1 Minor PR

Closed 7 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 69 updates

craftercms/studio-ui #4699

7.2.0 → 8.2.1 Major PR

Open 7 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 75 updates

phuongnq/studio-ui #90

8.0.2 → 8.2.0 Minor PR

Closed 8 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 68 updates

craftercms/studio-ui #4695

7.2.0 → 8.2.0 Major PR

Open 8 months ago 1 comment

Bump tinymce from 8.1.2 to 8.2.0

django-oscar/django-oscar #4530

8.1.2 → 8.2.0 Minor PR

Open 8 months ago 2 comments

Bump the all-ui-deps group across 1 directory with 73 updates

phuongnq/studio-ui #88

8.0.2 → 8.2.0 Minor PR

Closed 8 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 65 updates

craftercms/studio-ui #4684

7.2.0 → 8.2.0 Major PR

Open 8 months ago 2 comments

deps(deps): bump the catalog group across 1 directory with 92 updates

getcolex/directus-colex #14

6.8.5 → 6.8.6 Patch PR

Open 8 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 57 updates

craftercms/studio-ui #4680

8.0.2 → 8.1.2 Minor PR

Closed 8 months ago 1 comment

deps(deps): bump the catalog group with 90 updates

getcolex/directus-colex #4

6.8.5 → 6.8.6 Patch PR

Closed 8 months ago 2 comments

Bump the all-ui-deps group across 1 directory with 56 updates

craftercms/studio-ui #4679

8.0.2 → 8.1.2 Minor PR

Closed 8 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 68 updates

phuongnq/studio-ui #85

8.0.2 → 8.1.2 Minor PR

Open 8 months ago

Bump the all-ui-deps group across 1 directory with 67 updates

phuongnq/studio-ui #84

8.0.2 → 8.1.2 Minor PR

Closed 8 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 64 updates

craftercms/studio-ui #4678

7.2.0 → 8.1.2 Major PR

Closed 8 months ago 2 comments

Bump the all-ui-deps group across 1 directory with 55 updates

craftercms/studio-ui #4677

8.0.2 → 8.1.2 Minor PR

Closed 8 months ago 1 comment

deps(deps): bump the catalog group across 1 directory with 80 updates

directus/directus #25934

6.8.5 → 6.8.6 Patch PR

Open 8 months ago

Bump the all-ui-deps group across 1 directory with 65 updates

phuongnq/studio-ui #82

8.0.2 → 8.1.2 Minor PR

Open 8 months ago

Bump the all-ui-deps group across 1 directory with 61 updates

craftercms/studio-ui #4667

7.2.0 → 8.1.2 Major PR

Open 8 months ago

Bump the all-ui-deps group across 1 directory with 49 updates

craftercms/studio-ui #4666

8.0.2 → 8.1.2 Minor PR

Closed 8 months ago 1 comment

deps(deps): bump the catalog group across 1 directory with 79 updates

directus/directus #25925

6.8.5 → 6.8.6 Patch PR

Open 9 months ago

Bump the all-ui-deps group across 1 directory with 43 updates

craftercms/studio-ui #4664

8.0.2 → 8.1.2 Minor PR

Closed 9 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 55 updates

craftercms/studio-ui #4662

7.2.0 → 8.1.2 Major PR

Closed 9 months ago 2 comments

Package Details

Name:	`tinymce`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/tinymce`
JSON API:	View JSON

Security Advisories

20

Active advisories

HIGH 5

MODERATE 14

LOW 1

View All npm Advisories

Package Information

Description:

Web based JavaScript HTML WYSIWYG editor control.

Repository:	https://github.com/tinymce/tinymce
Homepage:	https://www.tiny.cloud/
Latest Release:	`7.9.1` about 1 year ago
Dependent Repos:	12,552
Dependent Packages:	1,197
Downloads:	2,752,486
Ranking:	Top 0.2401% by dependent repos Top 0.2059% by downloads Top 0.0632% by dependent pkgs

PR Status

Open 144 (46.3%)

Merged 23 (7.4%)

Closed 112 (36.0%)

PR Types

Major 135 (43.4%)

Minor 84 (27.0%)

Patch 58 (18.6%)

Removal 2 (0.6%)