CVE ID :CVE-2026-104847 Published : Oct. 2, 2026, 4:16 p.m. | 1 hour, 5 minutes ago Description :ProseMirror's view component renders and manages the editable browser interface for ProseMirror documents. Prior to 1.42.3, prosemirror-view paste handling accepts attacker-provided HTML whose...

#Sicherheitslücke #Browser

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-104847 - ProseMirror: XSS vulnerability in prosemirror-view's paste handling

VERWANDTEARTIKEL

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

CVE-2026-104851 - fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

CVE-2026-94483 - Next.js: Server-Side Request Forgery in Image Optimization

CVE-2026-104846 - Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940)

CVE-2026-103648 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in image-downloader

CVE-2026-90970 - Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway