prosemirror-view
1.42.6 · 25 Sep 2026MIT15.3M / weekRepositorynpmAtom feed
Security advisories
From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.
Is your project affected?
Paste your package.json, or type the range you declare for prosemirror-view. It is read in your browser and sent nowhere.
| Line | Newest | Where it stands |
|---|---|---|
| 1.42.7 | Safe from 1.42.3 | |
| 0.24.0 | 14 open advisories, worst high · last release Sep 2017, no longer updated |
- HighProseMirror has a XSS vulnerability in prosemirror-view's paste handlingGHSA-c8x8-7fp4-3x9w · 5 Oct 2026
- 1.x1.0.0 – 1.42.2Fixed in 1.42.3
- 0.24.x and older0.11.0 – 0.24.0No fix, no longer updated · move to 1.42.3
Registry facts last checked 22 Oct 2026. Releases and advisories last read 22 Oct 2026.