python3Packages.django-ckeditor
django-ckeditor 6.7.3 · pkgs/development/python-modules/django-ckeditor/default.nix
Health
Risk
risk 15 medium
- +15 marked insecure: meta.knownVulnerabilities
Version
6.7.3 no newer release known to repology
Channels
Hydra
no finished build of nixpkgs/unstable/python3Packages.django-ckeditor.x86_64-linux
Advisories
none open
Packaging
meta.knownVulnerabilities
Packagewhat each field means
Description
Django admin CKEditor integration
License
Platforms
31 platforms: Linux, Darwin
Source provenance
not set: built from source
Outputs
out distStatus
insecure
- django-ckeditor bundles CKEditor 4.22.1 which isn’t supported anmyore and which does have unfixed security issues Existing users of django-ckeditor should consider switching to a different editor such as CKEditor 5 (django-ckeditor-5), after verifying that its GPL licensing terms are acceptable, or ProseMirror (django-prose-mirror by the author of django-ckeditor). Support of the CKEditor 4 package is provided by its upstream developers as a non-free/commercial LTS package until December 2028. Note that while there are publicly known vulnerabilities for the CKEditor 4 series, the exploitability of these issues depends on how CKEditor is used by the given Django application. Further information: * List of vulnerabilities fixed in CKEditor 4.24.0-lts: * GHSA-fq6h-4g8v-qqvm * GHSA-fq6h-4g8v-qqvm * GHSA-mw2c-vx6j-mg76 * The django-ckeditor deprecation notice: <https://406.ch/writing/django-ckeditor/> * The non-free/commerical CKEditor 4 LTS package: <https://ckeditor.com/ckeditor-4-support/>
Maintainers
Version bumps 0all open bumps
None open.
Pull requests 0
None open.
Issues 0
None open.