Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

tinymce

Ecosystem:
npm
Package URL:
pkg:npm/tinymce
Total PRs:
311 Dependabot PRs
Latest PR:
13 days ago
Unique Repositories:
117 repositories
Unique Repos (30 days):
5 repositories
Security Advisories
TinyMCE Cross-Site Scripting (XSS) vulnerability using sanitization bypass through nested SVGs
GHSA-mh5m-5hw4-5c69 CVE-2026-47760 HIGH published 13 days ago • updated 3 days ago
### Impact TinyMCE 6.8.x contains an XSS vulnerability caused by improper SVG namespace scope handling in the sanitizer. A crafted payload using ne...
XSS in TinyMCE
GHSA-c78w-2gw7-gjv3 CVE-2019-1010091 MODERATE published about 6 years ago • updated about 8 hours ago
### Impact A cross-site scripting (XSS) vulnerability was discovered in: the core parser and `media` plugin. The vulnerability allowed arbitrary Ja...
Cross-site scripting vulnerability in TinyMCE
GHSA-27gm-ghr9-4v95 CVE-2020-17480 HIGH published over 6 years ago • updated about 8 hours ago
### Impact A cross-site scripting (XSS) vulnerability was discovered in: the core parser, `paste` and `visualchars` plugins. The vulnerability allo...
Cross-site scripting vulnerability in TinyMCE
GHSA-5h9g-x5rv-25wg CVE-2024-21908 MODERATE published over 4 years ago • updated 11 days ago
### Impact A cross-site scripting (XSS) vulnerability was discovered in the schema validation logic of the core parser. The vulnerability allowed a...
Regex denial of service vulnerability in codesample plugin
GHSA-h96f-fc7c-9r55 LOW published over 5 years ago • updated about 8 hours ago
### Impact A regex denial of service (ReDoS) vulnerability was discovered in a dependency of the `codesample` plugin. The vulnerability allowed poo...
View all 20 advisories
Recent PRs (filtered by: Merged )
RSS Feed Clear filter
Build(deps-dev): bump tinymce from 8.0.2 to 8.1.1

acrolinx/sidebar-sdk-js #669

8.0.2 → 8.1.1 Minor PR
Merged 9 months ago 1 comment
acrolinx
Bump tinymce from 6.4.2 to 7.2.0 in /Updates/Update 3.9 to 3.9.1/Update_3.9.1 in the npm_and_yarn group across 1 directory

REChain-Network-Solutions/DAO #40

6.4.2 → 7.2.0 Major PR
Merged 10 months ago
REChain-Network-Solutions
Bump tinymce from 8.0.1 to 8.0.2 in the tinymce group

aelfric/tabroom-fakeballot #141

8.0.1 → 8.0.2 Patch PR
Merged 10 months ago
aelfric
Bump tinymce from 7.9.1 to 8.0.2

SameOldNick/SameOldWebsite #459

7.9.1 → 8.0.2 Major PR
Merged 10 months ago
SameOldNick
Bump tinymce from 8.0.1 to 8.0.2

marcelorodrigo/geocachingeditor #51

8.0.1 → 8.0.2 Patch PR
Merged 10 months ago 1 comment
marcelorodrigo
Bump tinymce from 8.0.1 to 8.0.2

EngageSoftware/DNN-JavaScript-Libraries #1013

8.0.1 → 8.0.2 Patch PR
Merged 10 months ago
EngageSoftware
Bump the tinymce group with 2 updates

aelfric/tabroom-fakeballot #131

7.9.1 → 8.0.1 Major PR
Merged 11 months ago
aelfric
Bump tinymce from 8.0.0 to 8.0.1

marcelorodrigo/geocachingeditor #47

8.0.0 → 8.0.1 Patch PR
Merged 11 months ago 1 comment
marcelorodrigo
Bump tinymce and @umbraco-cms/backoffice in /src/ExtendEverything/Client

karl-sjogren/umbraco-extend-everything #86

removed Removal PR
Merged 11 months ago
karl-sjogren
Bump tinymce from 8.0.0 to 8.0.1

EngageSoftware/DNN-JavaScript-Libraries #1009

8.0.0 → 8.0.1 Patch PR
Merged 11 months ago
EngageSoftware
Build(deps-dev): bump tinymce from 8.0.0 to 8.0.1

acrolinx/sidebar-sdk-js #632

8.0.0 → 8.0.1 Patch PR
Merged 11 months ago 1 comment
acrolinx
Bump tinymce from 7.9.1 to 8.0.0

marcelorodrigo/geocachingeditor #46

7.9.1 → 8.0.0 Major PR
Merged 11 months ago 1 comment
marcelorodrigo
Build(deps-dev): bump tinymce from 7.9.1 to 8.0.0

acrolinx/sidebar-sdk-js #626

7.9.1 → 8.0.0 Major PR
Merged 11 months ago 1 comment
acrolinx
Bump tinymce from 7.9.1 to 8.0.0

AlchemyCMS/alchemy_cms #3343

7.9.1 → 8.0.0 Major PR
Merged 11 months ago 1 comment
AlchemyCMS
Bump tinymce from 6.8.4 to 7.2.0 in /app-engine/frontend

ModelEngine-Group/app-platform #232

6.8.4 → 7.2.0 Major PR
Merged about 1 year ago
ModelEngine-Group
Bump tinymce from 7.9.0 to 7.9.1

WWBN/AVideo #10053

7.9.0 → 7.9.1 Patch PR
Merged about 1 year ago
WWBN
Bump the npm_and_yarn group across 1 directory with 18 updates

keith-oak/design-system #2

5.10.7 → 7.2.0 Major PR
Merged about 1 year ago
keith-oak
chore(deps): bump the npm_and_yarn group across 1 directory with 5 updates

yshan2028/RuoYi-Vue3-FastAPI #8

5.10.9 → 7.2.0 Major PR
Merged about 1 year ago
yshan2028
Bump the production-dependencies group across 1 directory with 3 updates

NatLibFi/identifier-services-ui-admin #301

7.8.0 → 7.9.1 Minor PR
Merged about 1 year ago 1 comment
NatLibFi
build(deps): bump tinymce from 7.7.0 to 7.9.0

qld-gov-au/qgds-vanilla #327

7.7.0 → 7.9.0 Minor PR
Merged about 1 year ago 1 comment
qld-gov-au
Bump tinymce from 7.8.0 to 7.9.0

EngageSoftware/DNN-JavaScript-Libraries #993

7.8.0 → 7.9.0 Minor PR
Merged about 1 year ago
EngageSoftware
Bump tinymce from 5.10.0 to 5.10.9 in /tarim/app/modules/admin

algha/tarim #101

5.10.0 → 5.10.9 Patch PR
Merged over 2 years ago
algha
Bump tinymce from 5.5.1 to 5.10.7 in /vueapp

faveosuite/faveo-client-form-pwa #8

5.5.1 → 5.10.7 Minor PR
Merged about 3 years ago
faveosuite
Package Details
Name: tinymce
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/tinymce
JSON API: View JSON
Security Advisories

20

Active advisories
HIGH 5
MODERATE 14
LOW 1
View All npm Advisories
Package Information
Description:

Web based JavaScript HTML WYSIWYG editor control.

Repository: https://github.com/tinymce/tinymce
Homepage: https://www.tiny.cloud/
Latest Release: 7.9.1
about 1 year ago
Dependent Repos: 12,552
Dependent Packages: 1,197
Downloads: 2,752,486
Ranking: Top 0.2401% by dependent repos Top 0.2059% by downloads Top 0.0632% by dependent pkgs
PR Status
Open 144 (46.3%)
Merged 23 (7.4%)
Closed 112 (36.0%)
PR Types
Major 135 (43.4%)
Minor 84 (27.0%)
Patch 58 (18.6%)
Removal 2 (0.6%)