Approved changes feed: RSS · Atom

cpe:2.3:a:slab:quill:2.0.3:*:*:*:*:node.js:*:*

part: a version: 2.0.3 update: *

VendorSlab (5051201e-8d6a-5df6-bdba-cbb8f3e38bce)
ProductQuill (d163d65c-5905-565f-93f5-fad013a9a2c2)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-15056 vulnerable 2026-06-08 07:06:35.625786 Quill 2.0.3 - Lack of data validation in HTML export allowing XSS
A lack of data validation vulnerability in the HTML export feature in Quill in allows Cross-Site Scripting (XSS). This issue affects Quill: 2.0.3.
Published: 2026-01-13T20:39:29.627Z
Updated: 2026-04-20T14:10:18.123Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.