CVE-2026-116688 - CKEditor: Cross-site scripting (XSS) in the engine package
CVE ID :CVE-2026-116688 Published : Oct. 27, 2026, 7:36 p.m. | 47 minutes ago Description :CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 45.0.0 until 47.7.4 and 48.5.1, the engine uses a vulnerable es-toolkit version whose prototype-pollution behavior can...