CVE-2026-55886Published

Jodit Editor is a WYSIWYG editor with written in pure TypeScript file and image editing capabilities. Versions prior to 4.12.26 are vulnerable to Prototype Pollution through Jodit.modules.Helpers.set(chain, value, obj), which walks the dot-…

Exact source revision recorded 27 Oct 2026 15:15:14 UTC. It does not establish the source's current position. Latest evidence.

Recorded JSON

Immutable source observations

2 recorded revisions

Each citation identifies one complete source statement. Source modification dates and the time this installation observed them are distinct. Latest history includes records historically associated by source identifiers; a removed alias is not a current equivalence claim. Exact citations show that source record's own earlier observations. Failed reads and unchanged polls do not rewrite history.

27 Oct 2026 15:15:14 UTC

Jodit Editor is a WYSIWYG editor with written in pure TypeScript file and image editing capabilities. Versions prior to 4.12.26 are vulnerable to Prototype Pollution through Jodit.modules.Helpers.set(chain, value, obj), which walks the dot-…

nvd · CVE-2026-55886 · Published

25 Oct 2026 14:19:05 UTC

Jodit Editor is a WYSIWYG editor with written in pure TypeScript file and image editing capabilities. Versions prior to 4.12.26 are vulnerable to Prototype Pollution through Jodit.modules.Helpers.set(chain, value, obj), which walks the dot-…

nvd · CVE-2026-55886 · Published

This citation shows only its exact record and strictly earlier observation times. Open complete latest history.