summernote (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package summernote, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2024-29504 — CVSS 7.6 (high): Cross Site Scripting vulnerability in Summernote v.0.8.18 and before allows a remote attacker to execute arbtirary code via a crafted…
• CVE-2024-37629 — CVSS 6.1 (medium): SummerNote v0.9.1 is vulnerable to Cross Site Scripting (XSS) via the Code View Function.