When upstream breaks, Teire fixes your code.

teire-dev/teire System status

Built on

Product

Scan a repo Changes Install on GitHub Dashboard Demo video

Developers

Docs GitHub CLI and MCP teire.yml schema npm

Trust

How Teire runs Source code

Teire

Changes Scan Docs Trust

← All changes

react-draft-wysiwyg✕security

react-draft-wysiwyg: React Draft Wysiwyg Cross-Site Scripting (XSS) via the Embedded Button

React Draft Wysiwyg Cross-Site Scripting (XSS) via the Embedded Button (low). GHSA-fq5x-7292-2p5r, CVE-2025-3191.

react-draft-wysiwyg: React Draft Wysiwyg Cross-Site Scripting (XSS) via the Embedded Button: from its source to your code

osv.devquote checked
security advisory
Your codeby hand
Nemotron fixes

In its own wordsmatches the page ✓

React Draft Wysiwyg Cross-Site Scripting (XSS) via the Embedded Button

osv.dev/vulnerability/GHSA-fq5x-7292-2…from an advisory databasechecked 2026-10-30#0a24645fcf

What Teire looks for in your code

nothing to search for: checked by hand

Does it reach your code?

Fix in all Scan a repo

read by a advisory-feed · advisory/npm/react-draft-wysiwyg/GHSA-fq5x-7292-2p5r