@ckeditor/ckeditor5-markdown-gfm (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package @ckeditor/ckeditor5-markdown-gfm, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2021-21254 — CVSS 6.5 (medium): CKEditor 5 is an open source rich text editor framework with a modular architecture. The CKEditor 5 Markdown plugin (@ckeditor/ckeditor5-mar…
• CVE-2021-21391 — CVSS 6.5 (medium): CKEditor 5 provides a WYSIWYG editing solution. This CVE affects the following npm packages: ckeditor5-engine, ckeditor5-font…
• CVE-2022-31175 — CVSS 5.8 (medium): CKEditor 5 is a JavaScript rich text editor. A cross-site scripting vulnerability has been discovered affecting three optional CKEditor 5's…