New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More
Socket
Sign inDemoInstall
Socket

@ckeditor/ckeditor5-typing

Package Overview
Dependencies
Maintainers
1
Versions
862
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@ckeditor/ckeditor5-typing - npm Package Versions

23
87

44.2.1

Diff

Changelog

Source

44.2.1 (February 20, 2025)

We are happy to announce the release of CKEditor 5 v44.2.1.

During a recent internal audit, we identified a cross-site scripting (XSS) vulnerability in the CKEditor 5 real-time collaboration package (CVE-2025-25299). This vulnerability can lead to unauthorized JavaScript code execution and affects user markers, which represent users' positions within the document.

This vulnerability affects only installations with real-time collaborative editing enabled.

You can read more details in the relevant security advisory and contact us if you have more questions.

Bug fixes

  • comments: Fixed a few scenarios for which creating a new comment thread was impossible (for example, when a selection was made on multiple table cells). This was a regression introduced in v44.2.0.

Other changes

Released packages

Check out the Versioning policy guide for more information.

<details> <summary>Released packages (summary)</summary>

Other releases:

</details>
ckeditor
published 0.0.0-nightly-next-20250220.0 •

ckeditor
published 0.0.0-nightly-20250220.0 •

ckeditor
published 44.2.1-alpha.0 •

ckeditor
published 0.0.0-nightly-next-20250219.0 •

ckeditor
published 0.0.0-nightly-20250219.0 •

ckeditor
published 0.0.0-nightly-20250218.0 •

ckeditor
published 0.0.0-nightly-next-20250218.0 •

ckeditor
published 0.0.0-nightly-next-20250217.0 •

ckeditor
published 0.0.0-nightly-20250217.0 •

23
87
SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc