Start for Free
npm

trix

View on npm registry
9 Total advisories
9 Vulnerabilities
0 Malware

Dependency scanning

Check whether trix is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

UNKNOWN
npm

CVE-2026-73427

Trix is vulnerable to XSS through JSON deserialization bypass in drag-and-drop (Level0InputController)
MEDIUM 4.6
npm

CVE-2026-73428

Trix: Stored XSS via HTMLParser attribute injection on paste
MEDIUM 4.6
RubyGems

CVE-2026-73426

Trix has a Stored XSS vulnerability through serialized attributes
MEDIUM 4.6
npm

GHSA-g9jg-w8vm-g96v

Trix has a stored XSS vulnerability through its attachment attribute
MEDIUM 5.4
npm

CVE-2024-34341

Trix Editor Arbitrary Code Execution Vulnerability
MEDIUM 6.5
npm

CVE-2024-43368

Trix has a cross-site Scripting vulnerability on copy & paste

UNKNOWN
npm

CVE-2025-46812

Trix vulnerable to Cross-site Scripting on copy & paste
MEDIUM 5.3
npm

CVE-2025-21610

Trix allows Cross-site Scripting via `javascript:` url in a link
UNKNOWN
npm

CVE-2024-53847

Trix editor subject to XSS vulnerabilities on copy & paste

Browse more npm advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes