ckeditor/ckeditor5 v45.2.2 on GitHub

A Cross-Site Scripting (XSS) vulnerability has been discovered in the CKEditor 5 clipboard package (CVE-2025-58064). This vulnerability could be triggered by a specific user action, leading to unauthorized JavaScript code execution, if the attacker managed to insert malicious content into the editor, which might happen with a very specific editor configuration.

This vulnerability affects only installations where the editor configuration meets one of the following criteria:

HTML embed plugin is enabled
Custom plugin introducing an editable element which implements view RawElement is enabled

You can read more details in the relevant security advisory and contact us if you have more questions.

Released packages

Check out the Versioning policy guide for more information.

Released packages (summary)

Other releases:

@ckeditor/ckeditor5-adapter-ckfinder: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-ai: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-alignment: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-autoformat: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-autosave: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-basic-styles: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-block-quote: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-bookmark: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-case-change: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-ckbox: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-ckfinder: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-clipboard: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-cloud-services: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-code-block: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-collaboration-core: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-comments: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-core: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-document-outline: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-easy-image: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-editor-balloon: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-editor-classic: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-editor-decoupled: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-editor-inline: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-editor-multi-root: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-email: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-emoji: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-engine: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-enter: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-essentials: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-export-inline-styles: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-export-pdf: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-export-word: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-find-and-replace: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-font: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-format-painter: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-fullscreen: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-heading: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-highlight: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-horizontal-line: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-html-embed: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-html-support: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-icons: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-image: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-import-word: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-indent: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-language: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-link: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-list: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-list-multi-level: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-markdown-gfm: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-media-embed: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-mention: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-merge-fields: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-minimap: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-operations-compressor: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-page-break: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-pagination: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-paragraph: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-paste-from-office: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-paste-from-office-enhanced: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-real-time-collaboration: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-remove-format: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-restricted-editing: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-revision-history: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-select-all: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-show-blocks: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-slash-command: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-source-editing: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-source-editing-enhanced: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-special-characters: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-style: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-table: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-template: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-theme-lark: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-track-changes: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-typing: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-ui: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-undo: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-upload: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-uploadcare: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-utils: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-watchdog: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-widget: v45.2.1 => v45.2.2
@ckeditor/ckeditor5-word-count: v45.2.1 => v45.2.2
ckeditor5-collaboration: v45.2.1 => v45.2.2
ckeditor5-premium-features: v45.2.1 => v45.2.2