`tinymce`

Ecosystem:
npm

Package URL:
pkg:npm/tinymce

Total PRs:
311 Dependabot PRs

Latest PR:
12 days ago

Unique Repositories:
117 repositories

Unique Repos (30 days):
5 repositories

Security Advisories

XSS in TinyMCE

GHSA-c78w-2gw7-gjv3 CVE-2019-1010091 MODERATE published about 6 years ago • updated about 2 hours ago

### Impact A cross-site scripting (XSS) vulnerability was discovered in: the core parser and `media` plugin. The vulnerability allowed arbitrary Ja...

TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs

GHSA-mh5m-5hw4-5c69 CVE-2026-47760 HIGH published 12 days ago • updated 3 days ago

### Impact TinyMCE 6.8.x contains an XSS vulnerability caused by improper SVG namespace scope handling in the sanitizer. A crafted payload using ne...

TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option

GHSA-9hcv-j9pv-qmph CVE-2024-38356 MODERATE published almost 2 years ago • updated about 2 hours ago

### Impact A [cross-site scripting (XSS)](https://owasp.org/www-community/attacks/xss/) vulnerability was discovered in TinyMCE’s content extractio...

Cross-site scripting vulnerability in TinyMCE

GHSA-5h9g-x5rv-25wg CVE-2024-21908 MODERATE published over 4 years ago • updated 10 days ago

### Impact A cross-site scripting (XSS) vulnerability was discovered in the schema validation logic of the core parser. The vulnerability allowed a...

Regex denial of service vulnerability in codesample plugin

GHSA-h96f-fc7c-9r55 LOW published over 5 years ago • updated about 2 hours ago

### Impact A regex denial of service (ReDoS) vulnerability was discovered in a dependency of the `codesample` plugin. The vulnerability allowed poo...

View all 20 advisories

Recent PRs

Bump the all-ui-deps group across 1 directory with 44 updates

craftercms/studio-ui #4661

8.0.2 → 8.1.2 Minor PR

Open 9 months ago

Bump tinymce from 7.9.1 to 8.1.2

Farzam901/s-r-eng #14

7.9.1 → 8.1.2 Major PR

Open 9 months ago 2 comments

Bump tinymce from 7.9.1 to 8.1.2

ardifx01/django-oscar #11

7.9.1 → 8.1.2 Major PR

Open 9 months ago

Bump tinymce from 7.6.0 to 8.1.2

shayanaminaei/oscar-online-webstore #33

7.6.0 → 8.1.2 Major PR

Open 9 months ago

Bump tinymce from 7.6.0 to 8.1.2

marcinwojcik-dev/django-oscar #25

7.6.0 → 8.1.2 Major PR

Open 9 months ago

Bump the all-ui-deps group across 1 directory with 53 updates

phuongnq/studio-ui #80

8.0.2 → 8.1.2 Minor PR

Open 9 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 54 updates

craftercms/studio-ui #4660

7.2.0 → 8.1.2 Major PR

Open 9 months ago

Bump the all-ui-deps group across 1 directory with 34 updates

craftercms/studio-ui #4659

8.0.2 → 8.1.2 Minor PR

Open 9 months ago

Bump the frontend group across 1 directory with 39 updates

digitalfabrik/integreat-cms #3916

7.3.0 → 8.1.2 Major PR

Open 9 months ago

Bump the npm_and_yarn group across 1 directory with 39 updates

ANT0071/joplin #1

6.8.5 → 7.2.0 Major PR

Open 9 months ago

Bump tinymce from 6.8.5 to 7.2.0

YY-Nexus/directus #1

6.8.5 → 7.2.0 Major PR

Open 9 months ago

Bump tinymce from 7.9.1 to 8.1.2

shota0110/django-starter #4

7.9.1 → 8.1.2 Major PR

Open 9 months ago

Bump the all-ui-deps group across 1 directory with 52 updates

phuongnq/studio-ui #79

8.0.2 → 8.1.2 Minor PR

Open 9 months ago

Bump the all-ui-deps group across 1 directory with 33 updates

craftercms/studio-ui #4656

8.0.2 → 8.1.2 Minor PR

Open 9 months ago

Bump the all-ui-deps group across 1 directory with 50 updates

phuongnq/studio-ui #78

8.0.2 → 8.1.2 Minor PR

Open 9 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 30 updates

craftercms/studio-ui #4654

8.0.2 → 8.1.2 Minor PR

Closed 9 months ago 1 comment

deps(deps): bump the catalog group across 1 directory with 81 updates

directus/directus #25907

6.8.5 → 6.8.6 Patch PR

Open 9 months ago

Bump the all-ui-deps group across 1 directory with 51 updates

phuongnq/studio-ui #77

8.0.2 → 8.1.2 Minor PR

Closed 9 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 29 updates

craftercms/studio-ui #4652

8.0.2 → 8.1.2 Minor PR

Closed 9 months ago 1 comment

Bump tinymce from 7.9.1 to 8.1.2

Software707/Configuracion_trabajo2 #2

7.9.1 → 8.1.2 Major PR

Open 9 months ago

chore(deps): bump the npm_and_yarn group across 1 directory with 5 updates

weibaohui/k8m #316

6.8.5 → 6.8.6 Patch PR

Open 9 months ago 1 comment

chore: bump tinymce from 4.9.11 to 8.0.0 in the npm_and_yarn group across 1 directory

pressbooks/pressbooks #4212

4.9.11 → 8.0.0 Major PR

Open 9 months ago

Bump the all-ui-deps group across 1 directory with 50 updates

phuongnq/studio-ui #76

8.0.2 → 8.1.2 Minor PR

Open 9 months ago

Bump the all-ui-deps group across 1 directory with 53 updates

craftercms/studio-ui #4650

7.2.0 → 8.1.2 Major PR

Closed 9 months ago 2 comments

Bump the all-ui-deps group across 1 directory with 23 updates

craftercms/studio-ui #4649

8.0.2 → 8.1.2 Minor PR

Open 9 months ago 1 comment

Bump tinymce from 8.0.2 to 8.1.2 in the tinymce group

aelfric/tabroom-fakeballot #162

8.0.2 → 8.1.2 Minor PR

Open 9 months ago

chore(deps): bump tinymce from 8.0.2 to 8.1.2

Sumant3086/PlayCast #9

8.0.2 → 8.1.2 Minor PR

Open 9 months ago

deps(deps): bump the catalog group across 1 directory with 79 updates

directus/directus #25872

6.8.5 → 6.8.6 Patch PR

Open 9 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 47 updates

phuongnq/studio-ui #75

8.0.2 → 8.1.2 Minor PR

Closed 9 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 50 updates

craftercms/studio-ui #4647

7.2.0 → 8.1.2 Major PR

Closed 9 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 17 updates

craftercms/studio-ui #4646

8.0.2 → 8.1.2 Minor PR

Closed 9 months ago 1 comment

Bump tinymce from 8.0.1 to 8.1.2

GJoslin/INSHOT_Assignment0 #21

8.0.1 → 8.1.2 Minor PR

Open 9 months ago

Bump the all-ui-deps group across 1 directory with 14 updates

craftercms/studio-ui #4644

8.0.2 → 8.1.2 Minor PR

Closed 9 months ago 1 comment

Build(deps-dev): bump tinymce from 8.1.1 to 8.1.2

acrolinx/sidebar-sdk-js #671

8.1.1 → 8.1.2 Patch PR

Open 9 months ago

Bump the all-ui-deps group across 1 directory with 45 updates

phuongnq/studio-ui #74

8.0.2 → 8.1.1 Minor PR

Open 9 months ago

Bump the all-ui-deps group across 1 directory with 45 updates

craftercms/studio-ui #4642

8.0.2 → 8.1.1 Minor PR

Closed 9 months ago 1 comment

chore(deps): bump tinymce from 7.9.1 to 8.1.1 in /forge-app

Helical-Games/forge #510

7.9.1 → 8.1.1 Major PR

Open 9 months ago 1 comment

Build(deps-dev): bump tinymce from 8.0.2 to 8.1.1

acrolinx/sidebar-sdk-js #669

8.0.2 → 8.1.1 Minor PR

Merged 9 months ago 1 comment

chore(deps): bump tinymce from 8.0.2 to 8.1.0

Sumant3086/PlayCast #4

8.0.2 → 8.1.0 Minor PR

Closed 9 months ago 1 comment

npm(deps): bump the npm_and_yarn group across 1 directory with 2 updates

Shadesman5/pagekit #21

5.5.1 → 8.1.0 Major PR

Closed 9 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 48 updates

craftercms/studio-ui #4641

7.2.0 → 8.1.0 Major PR

Open 9 months ago

Bump the all-ui-deps group across 1 directory with 42 updates

phuongnq/studio-ui #73

8.0.2 → 8.1.0 Minor PR

Open 9 months ago 1 comment

Bump the all-ui-deps group across 1 directory with 42 updates

craftercms/studio-ui #4640

8.0.2 → 8.1.0 Minor PR

Open 9 months ago 1 comment

deps(deps): bump the catalog group across 1 directory with 74 updates

directus/directus #25853

6.8.5 → 6.8.6 Patch PR

Open 9 months ago 1 comment

Bump tinymce from 5.10.9 to 8.0.2 in the npm_and_yarn group across 1 directory

FRooter/roundcubemail #1

5.10.9 → 8.0.2 Major PR

Open 9 months ago

deps(deps): bump the catalog group with 72 updates

directus/directus #25827

6.8.5 → 6.8.6 Patch PR

Closed 9 months ago 3 comments

Bump the all-ui-deps group across 1 directory with 47 updates

craftercms/studio-ui #4633

7.2.0 → 8.0.2 Major PR

Open 9 months ago 3 comments

Bump the npm_and_yarn group across 1 directory with 43 updates

kmlbdh/meerachain-frontend #4

4.9.2 → 7.2.0 Major PR

Open 9 months ago

build(deps): bump tinymce and @tinymce/tinymce-react

oldgaffers/boats #114

6.8.6 → 8.0.2 Major PR

Open 9 months ago

Bump the all-ui-deps group across 1 directory with 46 updates

craftercms/studio-ui #4631

7.2.0 → 8.0.2 Major PR

Closed 9 months ago 2 comments

Package Details

Name:	`tinymce`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/tinymce`
JSON API:	View JSON

Security Advisories

20

Active advisories

HIGH 5

MODERATE 14

LOW 1

View All npm Advisories

Package Information

Description:

Web based JavaScript HTML WYSIWYG editor control.

Repository:	https://github.com/tinymce/tinymce
Homepage:	https://www.tiny.cloud/
Latest Release:	`7.9.1` about 1 year ago
Dependent Repos:	12,552
Dependent Packages:	1,197
Downloads:	2,752,486
Ranking:	Top 0.2401% by dependent repos Top 0.2059% by downloads Top 0.0632% by dependent pkgs

PR Status

Open 144 (46.3%)

Merged 23 (7.4%)

Closed 112 (36.0%)

PR Types

Major 135 (43.4%)

Minor 84 (27.0%)

Patch 58 (18.6%)

Removal 2 (0.6%)