`tinymce`

Ecosystem:
npm

Package URL:
pkg:npm/tinymce

Total PRs:
311 Dependabot PRs

Latest PR:
23 days ago

Unique Repositories:
117 repositories

Unique Repos (30 days):
5 repositories

Security Advisories

Cross-site scripting vulnerability in TinyMCE alerts

GHSA-gg8r-xjwq-4w92 CVE-2022-23494 MODERATE published over 3 years ago • updated 2 days ago

### Impact A cross-site scripting (XSS) vulnerability was discovered in the alert and confirm dialogs when these dialogs were provided with malicio...

Cross-site scripting vulnerability in TinyMCE

GHSA-5h9g-x5rv-25wg CVE-2024-21908 MODERATE published over 4 years ago • updated about 15 hours ago

### Impact A cross-site scripting (XSS) vulnerability was discovered in the schema validation logic of the core parser. The vulnerability allowed a...

XSS in TinyMCE

GHSA-c78w-2gw7-gjv3 CVE-2019-1010091 MODERATE published about 6 years ago • updated 9 days ago

### Impact A cross-site scripting (XSS) vulnerability was discovered in: the core parser and `media` plugin. The vulnerability allowed arbitrary Ja...

Cross-site scripting vulnerability in TinyMCE

GHSA-w7jx-j77m-wp65 CVE-2024-21911 MODERATE published over 5 years ago • updated 4 days ago

### Impact A cross-site scripting (XSS) vulnerability was discovered in the URL sanitization logic of the core parser. The vulnerability allowed ar...

TinyMCE Cross-Site Scripting (XSS) vulnerability through `mce:protected` comments

GHSA-v98h-vmpc-fpqv CVE-2026-47762 HIGH published 23 days ago • updated 1 day ago

### Impact Stored XSS vulnerability via forged mce:protected comments. Allows attackers to bypass sanitization and inject scripts that execute when...

View all 20 advisories

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump tinymce from 7.9.1 to 7.9.3

7.9.1 → 7.9.3 Patch PR

Open 23 days ago 1 comment

chore(deps): bump tinymce from 5.10.5 to 5.10.9

open-condo-software/condo #7708

5.10.5 → 5.10.9 Patch PR

Closed 23 days ago 2 comments

chore(deps): bump tinymce from 8.5.0 to 8.5.1

AlchemyCMS/alchemy_cms #3906

8.5.0 → 8.5.1 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump tinymce from 8.3.1 to 8.3.2

AlchemyCMS/alchemy_cms #3706

8.3.1 → 8.3.2 Patch PR

Open 4 months ago 4 comments

Bump tinymce from 8.3.0 to 8.3.1

evertjanMlbrgn/laravel-form-components #18

8.3.0 → 8.3.1 Patch PR

Closed 6 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 43 updates

craftercms/studio-ui #4723

8.2.1 → 8.2.2 Patch PR

Closed 7 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 40 updates

craftercms/studio-ui #4721

8.2.1 → 8.2.2 Patch PR

Closed 7 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 31 updates

craftercms/studio-ui #4718

8.2.1 → 8.2.2 Patch PR

Closed 7 months ago 1 comment

deps(deps): bump the catalog group across 1 directory with 92 updates

getcolex/directus-colex #14

6.8.5 → 6.8.6 Patch PR

Open 8 months ago 1 comment

deps(deps): bump the catalog group with 90 updates

getcolex/directus-colex #4

6.8.5 → 6.8.6 Patch PR

Closed 8 months ago 2 comments

deps(deps): bump the catalog group across 1 directory with 80 updates

directus/directus #25934

6.8.5 → 6.8.6 Patch PR

Open 9 months ago

deps(deps): bump the catalog group across 1 directory with 79 updates

directus/directus #25925

6.8.5 → 6.8.6 Patch PR

Open 9 months ago

deps(deps): bump the catalog group across 1 directory with 81 updates

directus/directus #25907

6.8.5 → 6.8.6 Patch PR

Open 9 months ago

chore(deps): bump the npm_and_yarn group across 1 directory with 5 updates

weibaohui/k8m #316

6.8.5 → 6.8.6 Patch PR

Open 9 months ago 1 comment

deps(deps): bump the catalog group across 1 directory with 79 updates

directus/directus #25872

6.8.5 → 6.8.6 Patch PR

Open 9 months ago 1 comment

Build(deps-dev): bump tinymce from 8.1.1 to 8.1.2

acrolinx/sidebar-sdk-js #671

8.1.1 → 8.1.2 Patch PR

Open 9 months ago

deps(deps): bump the catalog group across 1 directory with 74 updates

directus/directus #25853

6.8.5 → 6.8.6 Patch PR

Open 9 months ago 1 comment

deps(deps): bump the catalog group with 72 updates

directus/directus #25827

6.8.5 → 6.8.6 Patch PR

Closed 10 months ago 3 comments

deps(deps): bump the catalog group across 1 directory with 65 updates

directus/directus #25794

6.8.5 → 6.8.6 Patch PR

Open 10 months ago 1 comment

deps(deps): bump the catalog group across 1 directory with 52 updates

directus/directus #25767

6.8.5 → 6.8.6 Patch PR

Open 10 months ago

deps(deps): bump the catalog group across 1 directory with 51 updates

directus/directus #25758

6.8.5 → 6.8.6 Patch PR

Closed 10 months ago 1 comment

deps(deps): bump the catalog group across 1 directory with 50 updates

directus/directus #25736

6.8.5 → 6.8.6 Patch PR

Closed 10 months ago 3 comments

deps(deps): bump the catalog group across 1 directory with 46 updates

directus/directus #25731

6.8.5 → 6.8.6 Patch PR

Closed 10 months ago 2 comments

Bump tinymce from 8.0.1 to 8.0.2 in the tinymce group

aelfric/tabroom-fakeballot #141

8.0.1 → 8.0.2 Patch PR

Merged 10 months ago

deps(deps): bump the catalog group across 1 directory with 44 updates

syntaxstacker/directusV1 #12

6.8.5 → 6.8.6 Patch PR

Open 10 months ago 2 comments

deps(deps): bump the catalog group across 1 directory with 44 updates

directus/directus #25711

6.8.5 → 6.8.6 Patch PR

Open 10 months ago 3 comments

Bump tinymce from 8.0.1 to 8.0.2

WWBN/AVideo #10167

8.0.1 → 8.0.2 Patch PR

Open 10 months ago

Bump tinymce from 8.0.1 to 8.0.2

marcelorodrigo/geocachingeditor #51

8.0.1 → 8.0.2 Patch PR

Merged 10 months ago 1 comment

Bump tinymce from 8.0.1 to 8.0.2

GJoslin/INSHOT_Assignment0 #6

8.0.1 → 8.0.2 Patch PR

Closed 10 months ago 1 comment

Build(deps-dev): bump tinymce from 8.0.1 to 8.0.2

acrolinx/sidebar-sdk-js #646

8.0.1 → 8.0.2 Patch PR

Open 11 months ago

Bump tinymce from 8.0.1 to 8.0.2

EngageSoftware/DNN-JavaScript-Libraries #1013

8.0.1 → 8.0.2 Patch PR

Merged 11 months ago

deps(deps): bump the catalog group with 37 updates

syntaxstacker/directusV1 #2

6.8.5 → 6.8.6 Patch PR

Open 11 months ago 1 comment

deps(deps): bump the catalog group across 1 directory with 34 updates

directus/directus #25667

6.8.5 → 6.8.6 Patch PR

Open 11 months ago

deps(deps): bump the catalog group across 1 directory with 23 updates

directus/directus #25637

6.8.5 → 6.8.6 Patch PR

Closed 11 months ago 3 comments

deps(deps): bump the catalog group across 1 directory with 22 updates

directus/directus #25635

6.8.5 → 6.8.6 Patch PR

Closed 11 months ago 3 comments

deps(deps): bump the catalog group with 18 updates

directus/directus #25615

6.8.5 → 6.8.6 Patch PR

Open 11 months ago 2 comments

Bump tinymce from 8.0.0 to 8.0.1

marcelorodrigo/geocachingeditor #47

8.0.0 → 8.0.1 Patch PR

Merged 11 months ago 1 comment

Bump tinymce from 8.0.0 to 8.0.1

EngageSoftware/DNN-JavaScript-Libraries #1009

8.0.0 → 8.0.1 Patch PR

Merged 11 months ago

Build(deps-dev): bump tinymce from 8.0.0 to 8.0.1

acrolinx/sidebar-sdk-js #632

8.0.0 → 8.0.1 Patch PR

Merged 11 months ago 1 comment

build(deps): bump the non-breaking-changes group across 1 directory with 54 updates

elkon028/yudao-ui-admin-vben5 #10

7.9.0 → 7.9.1 Patch PR

Open about 1 year ago

chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates

weibaohui/k8m #195

6.8.5 → 6.8.6 Patch PR

Open about 1 year ago 2 comments

build(deps): bump the non-breaking-changes group across 1 directory with 51 updates

elkon028/yudao-ui-admin-vben5 #8

7.9.0 → 7.9.1 Patch PR

Closed about 1 year ago 1 comment

build(deps): bump the non-breaking-changes group across 1 directory with 49 updates

elkon028/yudao-ui-admin-vben5 #7

7.9.0 → 7.9.1 Patch PR

Closed about 1 year ago 1 comment

fix(deps): bump tinymce from 7.9.0 to 7.9.1

Manusosy/emotionsorg #27

7.9.0 → 7.9.1 Patch PR

Open about 1 year ago 2 comments

build(deps): bump the non-breaking-changes group across 1 directory with 44 updates

elkon028/yudao-ui-admin-vben5 #6

7.9.0 → 7.9.1 Patch PR

Open about 1 year ago

build(deps): bump the non-breaking-changes group with 41 updates

elkon028/yudao-ui-admin-vben5 #1

7.9.0 → 7.9.1 Patch PR

Open about 1 year ago

Bump tinymce from 7.9.0 to 7.9.1

WWBN/AVideo #10053

7.9.0 → 7.9.1 Patch PR

Merged about 1 year ago

Bump tinymce from 7.9.0 to 7.9.1

marcelorodrigo/geocachingeditor #40

7.9.0 → 7.9.1 Patch PR

Open about 1 year ago

Build(deps-dev): bump tinymce from 7.9.0 to 7.9.1

acrolinx/sidebar-sdk-js #575

7.9.0 → 7.9.1 Patch PR

Open about 1 year ago

build(deps): bump tinymce from 7.9.0 to 7.9.1

qld-gov-au/qgds-vanilla #344

7.9.0 → 7.9.1 Patch PR

Open about 1 year ago 1 comment

Package Details

Name:	`tinymce`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/tinymce`
JSON API:	View JSON

Security Advisories

20

Active advisories

HIGH 5

MODERATE 14

LOW 1

View All npm Advisories

Package Information

Description:

Web based JavaScript HTML WYSIWYG editor control.

Repository:	https://github.com/tinymce/tinymce
Homepage:	https://www.tiny.cloud/
Latest Release:	`7.9.1` about 1 year ago
Dependent Repos:	12,552
Dependent Packages:	1,197
Downloads:	2,752,486
Ranking:	Top 0.2401% by dependent repos Top 0.2059% by downloads Top 0.0632% by dependent pkgs

PR Status

Open 144 (46.3%)

Merged 23 (7.4%)

Closed 112 (36.0%)

PR Types

Major 135 (43.4%)

Minor 84 (27.0%)

Patch 58 (18.6%)

Removal 2 (0.6%)