
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@ckeditor/ckeditor5-undo
Advanced tools
@ckeditor/ckeditor5-undo is a plugin for CKEditor 5 that provides undo and redo functionalities. It allows users to revert changes made to the content and reapply them if needed, enhancing the editing experience by providing a way to easily correct mistakes or revisit previous states of the content.
Undo
This feature allows users to revert the last change made to the content. The code sample demonstrates how to include the Undo plugin in a CKEditor 5 build and add undo functionality to the toolbar.
import Undo from '@ckeditor/ckeditor5-undo/src/undo';
ClassicEditor
.create( document.querySelector( '#editor' ), {
plugins: [ Undo, ... ],
toolbar: [ 'undo', 'redo', ... ]
} )
.catch( error => {
console.error( error );
} );
Redo
This feature allows users to reapply the last undone change. The code sample shows how to include the Redo functionality in the CKEditor 5 toolbar using the Undo plugin.
import Undo from '@ckeditor/ckeditor5-undo/src/undo';
ClassicEditor
.create( document.querySelector( '#editor' ), {
plugins: [ Undo, ... ],
toolbar: [ 'undo', 'redo', ... ]
} )
.catch( error => {
console.error( error );
} );
Quill is a modern WYSIWYG editor built for compatibility and extensibility. It includes built-in undo and redo functionalities similar to @ckeditor/ckeditor5-undo. Quill's undo and redo features are part of its core module, making it easy to use without additional plugins.
TinyMCE is a popular rich text editor that also provides undo and redo functionalities. Similar to @ckeditor/ckeditor5-undo, TinyMCE includes these features as part of its core editor capabilities, allowing users to easily revert and reapply changes.
Draft.js is a JavaScript rich text editor framework developed by Facebook. It provides undo and redo functionalities through its EditorState management. Unlike @ckeditor/ckeditor5-undo, Draft.js requires more setup and configuration to implement these features.
This package implements undo support for CKEditor 5.
This plugin is part of the ckeditor5
package. Install the whole package to use it.
npm install ckeditor5
If you want to check full CKEditor 5 capabilities, sign up for a free non-commitment 14-day trial.
Check out the demo in the undo/redo feature guide.
See the @ckeditor/ckeditor5-undo
package page in CKEditor 5 documentation.
Licensed under a dual-license model, this software is available under:
For more information, see: https://ckeditor.com/legal/ckeditor-licensing-options.
46.0.3 (September 3, 2025)
A Cross-Site Scripting (XSS) vulnerability has been discovered in the CKEditor 5 clipboard package (CVE-2025-58064
). This vulnerability could be triggered by a specific user action, leading to unauthorized JavaScript code execution, if the attacker managed to insert malicious content into the editor, which might happen with a very specific editor configuration.
This vulnerability affects only installations where the editor configuration meets one of the following criteria:
You can read more details in the relevant security advisory and contact us if you have more questions.
Check out the Versioning policy guide for more information.
<details> <summary>Released packages (summary)</summary>Other releases:
FAQs
Undo feature for CKEditor 5.
The npm package @ckeditor/ckeditor5-undo receives a total of 856,201 weekly downloads. As such, @ckeditor/ckeditor5-undo popularity was classified as popular.
We found that @ckeditor/ckeditor5-undo demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.