Vulnerability Database · npm · Package report
@tinymce/tinymce-react: vulnerability history, versions and safety
@tinymce/tinymce-react is a package in the npm ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the npm ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on @tinymce/tinymce-react 6.3.1 i
Updated on 23 Oct 2026
Good news: 6.3.1, the version you would install today, has no known vulnerabilities.
- Security Minor issues
- Maintenance Sustainable
- Popularity Niche
- Community Quiet
What to do: Stay on 6.3.1 or newer. This can change: a vulnerability disclosed tomorrow can affect 6.3.1 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release 6.3.1 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Depended on by 76 packages i
- Stars 1,070 i
- OpenSSF scorecard 4/10 i
- Last release this month i
- Licence MIT i
Version list, release dates, licence and dependants published by the npm registry, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for @tinymce/tinymce-react, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- 6.3.2-rc.20261012053359223.shaebd7307 12 Oct 2026
- 6.3.1 12 Oct 2026
- 6.3.1-feature.20261012051045479.shaddcada9 12 Oct 2026
- 6.3.1-rc.20261002032338427.shae654e79 02 Oct 2026
- 6.3.1-feature.20261001014220910.sha34952ea 01 Oct 2026
- 6.3.1-rc.20260930235752262.sha9cf53fc 01 Oct 2026
- 6.3.1-feature.20260930223450698.shafc3873f 30 Sep 2026
- 6.3.1-rc.20251103084220573.sha3c1864c 03 Nov 2025
- 6.3.1-feature.20251031134916198.sha1636919 31 Oct 2025
- 6.3.1-feature.20251028153121238.sha2b562e9 28 Oct 2025
- 6.3.1-feature.20251028131129111.sha1c9b2b9 28 Oct 2025
- 6.3.1-feature.20251028114129527.shaa2fde47 28 Oct 2025
- 6.3.1-feature.20251028054937834.sha4b5c9fc 28 Oct 2025
- 6.3.1-rc.20250731045226493.sha9891fe6 31 Jul 2025
- 6.3.0 31 Jul 2025
- 6.3.0-feature.20250731015048163.shaba1ce73 31 Jul 2025
- 6.2.2-rc.20250729070145936.sha6d409aa 29 Jul 2025
- 6.2.2-feature.20250729014209382.shafb9c620 29 Jul 2025
- 6.2.2-rc.20250603005530980.shaf5a9520 03 Jun 2025
- 6.2.1 03 Jun 2025
- 6.2.1-feature.20250602230724395.sha5532672 02 Jun 2025
- 6.2.1-rc.20250602225215255.sha6a788a0 02 Jun 2025
- 6.2.1-hotfix.20250602045039622.sha6cfca16 02 Jun 2025
- 6.2.1-hotfix.20250602044420339.sha4599031 02 Jun 2025
- 6.2.1-hotfix.20250530004256025.sha1483ad9 30 May 2025
- 6.2.1-rc.20250529060040024.sha3b916c6 29 May 2025
- 6.2.0 29 May 2025
- 6.2.0-feature.20250529004840389.shac1f9530 29 May 2025
- 6.2.0-rc.20250518232324396.sha8ceeac1 18 May 2025
- 6.2.0-feature.20250509055238325.sha93815f4 09 May 2025
- 6.2.0-feature.20250509054646504.sha82b17af 09 May 2025
- 7.0.0-feature.20250506055355969.shaf72c164 06 May 2025
- 6.1.1-rc.20250331043411718.sha4ce80bb 31 Mar 2025
- 6.1.0 31 Mar 2025
- 6.1.0-feature.20250331012207489.shaa84959c 31 Mar 2025
- 6.0.0-feature.20250328045026627.sha4f5b1f0 28 Mar 2025
- 7.0.0-feature.20250327021256575.sha87adf7b 27 Mar 2025
- 7.0.0-rc.20250322095423848.shaa345338 22 Mar 2025
- 7.0.0-feature.20250319091627773.sha63140fd 19 Mar 2025
- 7.0.0-feature.20250318062715212.sha61241fa 18 Mar 2025
- 7.0.0-feature.20250318061555819.shab4007a3 18 Mar 2025
- 7.0.0-feature.20250312131636065.shad77285b 12 Mar 2025
- 7.0.0-rc.20250311070951550.sha35b4c64 11 Mar 2025
- 7.0.0-feature.20250311064601215.sha97bde82 11 Mar 2025
- 7.0.0-feature.20250311064026732.shaba63929 11 Mar 2025
- 6.0.1-rc.20250311063217689.sha807c993 11 Mar 2025
- 6.0.1-feature.20250311062229252.shac8f7580 11 Mar 2025
- 6.0.1-feature.20250311011259033.shaf7dfddb 11 Mar 2025
- 7.0.0-feature.20250310041110302.shafc82e59 10 Mar 2025
- 7.0.0-feature.20250308083744797.sha7af5e89 08 Mar 2025
- 6.0.1-feature.20250308081808158.shac5cfca3 08 Mar 2025
- 6.0.1-feature.20250308080940155.sha2493092 08 Mar 2025
- 7.0.0-feature.20250308020338344.sha859d1f6 08 Mar 2025
- 7.0.0-feature.20250307022320356.shab2f0f70 07 Mar 2025
- 7.0.0-feature.20250307021339821.sha58e8340 07 Mar 2025
- 7.0.0-feature.20250306075001013.sha2611e4e 06 Mar 2025
- 7.0.0-feature.20250306001601482.shada79160 06 Mar 2025
- 6.0.1-feature.20250305140518759.shab8d794f 05 Mar 2025
- 6.0.1-feature.20250305105808439.sha9bb49d9 05 Mar 2025
- 6.0.1-feature.20250305004031505.shaf187c1b 05 Mar 2025
- 6.0.1-feature.20250305003436486.sha8e6f342 05 Mar 2025
- 6.0.1-feature.20250304060341777.shad5432fe 04 Mar 2025
- 6.0.1-feature.20250304055833332.sha7b1d317 04 Mar 2025
- 6.0.1-feature.20250304052109652.sha6d36958 04 Mar 2025
- 6.0.1-feature.20250303045808215.shabae01c8 03 Mar 2025
- 6.0.1-feature.20250303004124356.shab1f435a 03 Mar 2025
- 6.0.1-feature.20250302152522429.sha857c954 02 Mar 2025
- 6.0.1-rc.20250221041146163.sha650e3a5 21 Feb 2025
- 6.0.0 21 Feb 2025
- 6.0.0-feature.20250221032340104.sha1c6ba1a 21 Feb 2025
- 6.0.0-feature.20250211101340132.sha1969a59 11 Feb 2025
- 6.0.0-alpha.20250114233224291.shac053b5d 14 Jan 2025
- 6.0.0-alpha.20250114224233428.shacfeafb1 14 Jan 2025
- 6.0.0-feature.20241214094116267.sha177bb0f 14 Dec 2024
- 6.0.0-feature.20241129014106090.sha55020c2 29 Nov 2024
- 6.0.0-rc.20241129013940013.shaa0af1be 29 Nov 2024
- 6.0.0-feature.20241129013926199.shab0b6a02 29 Nov 2024
- 6.0.0-hotfix.20241129011012646.sha40e90e8 29 Nov 2024
- 6.0.0-rc.20241031060935059.sha2666ea4 31 Oct 2024
- 6.0.0-rc.20241031060356729.sha6cd9241 31 Oct 2024
- 6.0.0-feature.20241025074433859.shaeadcb06 25 Oct 2024
- 6.0.0-feature.20241021053748499.sha4e4de68 21 Oct 2024
- 6.0.0-rc.20241021053634945.shacd0ce60 21 Oct 2024
- 6.0.0-feature.20241021011056449.sha56835a0 21 Oct 2024
- 6.0.0-feature.20240921131812423.shac228b20 21 Sep 2024
- 6.0.0-feature.20240917194033210.sha7424c73 17 Sep 2024
- 6.0.0-feature.20240912040738957.shaf64bb70 12 Sep 2024
- 6.0.0-feature.20240831065904723.sha14592c3 31 Aug 2024
- 6.0.0-rc.20240719085314016.shaf6b7a13 19 Jul 2024
- 6.0.0-feature.20240716075607072.shab0c2481 16 Jul 2024
- 5.1.2-feature.20240716074825949.sha078309d 16 Jul 2024
- 5.1.2-feature.20240716073939528.sha26b5632 16 Jul 2024
- 5.1.2-feature.20240716043059438.shab282b50 16 Jul 2024
- 5.1.2-feature.20240716042413983.shad919ad8 16 Jul 2024
- 5.1.2-rc.20240715020545320.shad919ad8 15 Jul 2024
- 5.1.2-feature.20240709011619104.sha6039318 09 Jul 2024
- 5.1.2-feature.20240708060041889.sha4bce245 08 Jul 2024
- 5.1.2-feature.20240619151656946.shae2d5b34 19 Jun 2024
- 5.1.2-rc.20240612041742117.shad7d37b6 12 Jun 2024
- 5.1.1 12 Jun 2024
- 5.1.1-rc.20240612040407974.sha7ffe0f3 12 Jun 2024
- 5.1.1-hotfix.20240612033724209.sha214f44c 12 Jun 2024
- 5.1.1-hotfix.20240612033131048.sha6981467 12 Jun 2024
- 5.1.1-rc.20240611234806748.sha6981467 11 Jun 2024
- 5.1.0 11 Jun 2024
- 5.1.0-feature.20240611234127395.sha94ff901 11 Jun 2024
- 5.1.0-rc.20240528122243443.shaf35497d 28 May 2024
- 5.1.0-feature.20240527013721347.sha3b64f18 27 May 2024
- 5.1.0-feature.20240527012354520.sha04ffaeb 27 May 2024
- 5.1.0-feature.20240527011355066.shad822088 27 May 2024
- 5.1.0-rc.20240520003552166.shad822088 20 May 2024
- 5.1.0-feature.20240517001225742.shad500310 17 May 2024
- 5.1.0-feature.20240517000137912.sha1cd38cf 17 May 2024
- 5.1.0-feature.20240502151327393.shaed5bcc5 02 May 2024
- 5.1.0-rc.20240424005658844.sha1cd38cf 24 Apr 2024
- 5.1.0-feature.20240419013400225.shadeb5303 19 Apr 2024
- 5.1.0-feature.20240418222730927.sha4f1b850 18 Apr 2024
- 5.1.0-feature.20240415023251402.sha4df5e67 15 Apr 2024
- 5.0.2-feature.20240415022139006.sha2f3367c 15 Apr 2024
- 5.1.0-rc.20240414231428504.sha66d5015 14 Apr 2024
The newest 120 of 438 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
03 Vulnerabilities
Recorded vulnerabilities for @tinymce/tinymce-react
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About @tinymce/tinymce-react
Is @tinymce/tinymce-react safe to use?
Vulert has no vulnerabilities on record for @tinymce/tinymce-react in npm at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is @tinymce/tinymce-react's Vulert package health score?
Vulert scores @tinymce/tinymce-react 80/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of @tinymce/tinymce-react affected?
No. 6.3.1, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
How many vulnerabilities does @tinymce/tinymce-react have?
0 vulnerabilities are recorded for @tinymce/tinymce-react in the npm ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new @tinymce/tinymce-react vulnerabilities disclosed?
0 vulnerabilities were recorded for @tinymce/tinymce-react in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of @tinymce/tinymce-react are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor @tinymce/tinymce-react for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the @tinymce/tinymce-react version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.