From 29a73e54ff3c90ff1eee1c602383dfef1785f5fc Mon Sep 17 00:00:00 2001 From: cookesan <6601329+cookesan@users.noreply.github.com> Date: Tue, 7 Jul 2026 06:43:26 -0400 Subject: [PATCH 1/4] Add TinyMCE plugins NVD reference --- .../2021/11/GHSA-r8hm-w5f7-wj39/GHSA-r8hm-w5f7-wj39.json | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/advisories/github-reviewed/2021/11/GHSA-r8hm-w5f7-wj39/GHSA-r8hm-w5f7-wj39.json b/advisories/github-reviewed/2021/11/GHSA-r8hm-w5f7-wj39/GHSA-r8hm-w5f7-wj39.json index 1c01236ce2abb..a9ced515a0e47 100644 --- a/advisories/github-reviewed/2021/11/GHSA-r8hm-w5f7-wj39/GHSA-r8hm-w5f7-wj39.json +++ b/advisories/github-reviewed/2021/11/GHSA-r8hm-w5f7-wj39/GHSA-r8hm-w5f7-wj39.json @@ -97,6 +97,10 @@ "type": "WEB", "url": "https://github.com/tinymce/tinymce/security/advisories/GHSA-r8hm-w5f7-wj39" }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21910" + }, { "type": "WEB", "url": "https://github.com/jazzband/django-tinymce/issues/366" @@ -124,4 +128,4 @@ "github_reviewed_at": "2021-11-01T20:02:43Z", "nvd_published_at": null } -} \ No newline at end of file +} From f8d5e8e1846b51c1bef486f325d1178c4f4d3545 Mon Sep 17 00:00:00 2001 From: cookesan <6601329+cookesan@users.noreply.github.com> Date: Tue, 7 Jul 2026 11:02:24 -0400 Subject: [PATCH 2/4] Add TinyMCE plugin fixed release reference --- .../2021/11/GHSA-r8hm-w5f7-wj39/GHSA-r8hm-w5f7-wj39.json | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/advisories/github-reviewed/2021/11/GHSA-r8hm-w5f7-wj39/GHSA-r8hm-w5f7-wj39.json b/advisories/github-reviewed/2021/11/GHSA-r8hm-w5f7-wj39/GHSA-r8hm-w5f7-wj39.json index a9ced515a0e47..c7fa9de64a216 100644 --- a/advisories/github-reviewed/2021/11/GHSA-r8hm-w5f7-wj39/GHSA-r8hm-w5f7-wj39.json +++ b/advisories/github-reviewed/2021/11/GHSA-r8hm-w5f7-wj39/GHSA-r8hm-w5f7-wj39.json @@ -101,6 +101,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21910" }, + { + "type": "WEB", + "url": "https://github.com/tinymce/tinymce/releases/tag/5.10.0" + }, { "type": "WEB", "url": "https://github.com/jazzband/django-tinymce/issues/366" From 17e0538af06d26586be99533a6d50a6998de2c57 Mon Sep 17 00:00:00 2001 From: cookesan <6601329+cookesan@users.noreply.github.com> Date: Tue, 7 Jul 2026 12:40:59 -0400 Subject: [PATCH 3/4] Add TinyMCE fixed package references --- .../2021/11/GHSA-r8hm-w5f7-wj39/GHSA-r8hm-w5f7-wj39.json | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/advisories/github-reviewed/2021/11/GHSA-r8hm-w5f7-wj39/GHSA-r8hm-w5f7-wj39.json b/advisories/github-reviewed/2021/11/GHSA-r8hm-w5f7-wj39/GHSA-r8hm-w5f7-wj39.json index c7fa9de64a216..c37ea0df9b712 100644 --- a/advisories/github-reviewed/2021/11/GHSA-r8hm-w5f7-wj39/GHSA-r8hm-w5f7-wj39.json +++ b/advisories/github-reviewed/2021/11/GHSA-r8hm-w5f7-wj39/GHSA-r8hm-w5f7-wj39.json @@ -105,6 +105,14 @@ "type": "WEB", "url": "https://github.com/tinymce/tinymce/releases/tag/5.10.0" }, + { + "type": "PACKAGE", + "url": "https://www.npmjs.com/package/tinymce/v/5.10.0" + }, + { + "type": "PACKAGE", + "url": "https://packagist.org/packages/tinymce/tinymce#5.10.0" + }, { "type": "WEB", "url": "https://github.com/jazzband/django-tinymce/issues/366" From 2481f3ac04d990f3ef19fc61c5ff787a9cb1cab4 Mon Sep 17 00:00:00 2001 From: cookesan <6601329+cookesan@users.noreply.github.com> Date: Tue, 7 Jul 2026 20:40:40 -0400 Subject: [PATCH 4/4] Set TinyMCE plugins NVD published timestamp --- .../2021/11/GHSA-r8hm-w5f7-wj39/GHSA-r8hm-w5f7-wj39.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/advisories/github-reviewed/2021/11/GHSA-r8hm-w5f7-wj39/GHSA-r8hm-w5f7-wj39.json b/advisories/github-reviewed/2021/11/GHSA-r8hm-w5f7-wj39/GHSA-r8hm-w5f7-wj39.json index c37ea0df9b712..f9b5bbab4b3a5 100644 --- a/advisories/github-reviewed/2021/11/GHSA-r8hm-w5f7-wj39/GHSA-r8hm-w5f7-wj39.json +++ b/advisories/github-reviewed/2021/11/GHSA-r8hm-w5f7-wj39/GHSA-r8hm-w5f7-wj39.json @@ -138,6 +138,6 @@ "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2021-11-01T20:02:43Z", - "nvd_published_at": null + "nvd_published_at": "2024-01-03T16:15:09Z" } }