GIVE YOUR AGENT THE EVIDENCE

Set up in your agent.

One prompt to get started. Paste it into your coding agent to connect cve.new through MCP and bring vulnerability context into your workflow.

Your agent needs remote MCP support and access to https://cve.new/mcp.

Read the setup guide

cve.new
npm / PACKAGE INTELLIGENCE

ckeditor5

Follow this package

Get the evidence behind this dependency. Browse imported advisories below, or check an exact version against OSV now. View source coverage.

Behind the package

View on npm

Explore what the publisher declares for the latest npm release. These details are not a safety score; listed attestations have not been independently verified here.

A set of ready-to-use rich text editors created with a powerful framework. Made with real-time collaborative editing in mind.

Latest release49.0.1
Declared licenseSEE LICENSE IN LICENSE.md
Listed maintainersckeditor
Runtime dependencies59
Install-time scriptsNone declared
Integrity metadataRecorded by registry
Attestation metadataNot recorded
Registry deprecationNot marked deprecated
Direct dependencies of 49.0.1

Fetched 28/10/2026, 08:13:10 UTC · Original registry metadata

Release history

Explore up to 40 recent releases. Pick a version for an OSV check; registry metadata alone does not tell you whether a release has known vulnerabilities.

Check the version you ship.

Get a fresh OSV lookup for an exact release. We send the package name and version to OSV without storing a report.

Advisories & recorded fixes

Semantic versions

From 45.0.0 before 47.7.4

Fixed in 47.7.4

View affected-version evidence
{
  "ranges": [
    {
      "events": [
        {
          "introduced": "45.0.0"
        },
        {
          "fixed": "47.7.4"
        }
      ],
      "type": "SEMVER"
    }
  ],
  "versions": []
}
Semantic versions

From 48.0.0 before 48.5.1

Fixed in 48.5.1

View affected-version evidence
{
  "ranges": [
    {
      "events": [
        {
          "introduced": "48.0.0"
        },
        {
          "fixed": "48.5.1"
        }
      ],
      "type": "SEMVER"
    }
  ],
  "versions": []
}
Semantic versions

From 29.0.0 before 47.7.4

Fixed in 47.7.4

View affected-version evidence
{
  "ranges": [
    {
      "events": [
        {
          "introduced": "29.0.0"
        },
        {
          "fixed": "47.7.4"
        }
      ],
      "type": "SEMVER"
    }
  ],
  "versions": []
}
Semantic versions

From 48.0.0 before 48.5.1

Fixed in 48.5.1

View affected-version evidence
{
  "ranges": [
    {
      "events": [
        {
          "introduced": "48.0.0"
        },
        {
          "fixed": "48.5.1"
        }
      ],
      "type": "SEMVER"
    }
  ],
  "versions": []
}