Security
فارسی
All products

trix

npm · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Trix has a Stored XSS vulnerability through serialized attributesCVE-2026-73426 · GHSA-QMPG-8XG6-PH5Q trixaction_text-trix npmRubyGems Medium Fix reported
Trix is vulnerable to XSS through JSON deserialization bypass in drag-and-drop (Level0InputController)CVE-2026-73427 · GHSA-53P3-C7VP-4MCC trixaction_text-trix npmRubyGems Low Fix reported
Trix has a stored XSS vulnerability through its attachment attributeGHSA-G9JG-W8VM-G96V trixaction_text-trix npmRubyGems Medium Fix reported
Trix: Stored XSS via HTMLParser attribute injection on pasteCVE-2026-73428 · GHSA-53G2-MVCC-Q9X3 trixaction_text-trix npmRubyGems Medium Fix reported
Trix Editor Arbitrary Code Execution VulnerabilityCVE-2024-34341 · GHSA-QJQP-XR96-CJ99 trixactiontext npmRubyGems Medium Fix reported
Trix has a cross-site Scripting vulnerability on copy & paste CVE-2024-43368 · GHSA-QM2Q-9F3Q-2VCV trix npm Medium Fix reported
Trix vulnerable to Cross-site Scripting on copy & pasteCVE-2025-46812 · GHSA-MCRW-746G-9Q8H trix npm Low Fix reported
Trix allows Cross-site Scripting via `javascript:` url in a linkCVE-2025-21610 · GHSA-J386-3444-QGWG trix npm Medium Fix reported
Trix editor subject to XSS vulnerabilities on copy & pasteCVE-2024-53847 · GHSA-6VX4-V2JW-QWQH trix npm Medium Fix reported