CKEditor 4 has been updated to 4.17.1. It is included in net.jangaroo:ckeditor4 , version 4.1.4.

For details, see recent release notes:

This update comes with XSS vulnerability fixes rated as important by CKEditor.

While in CoreMedia Blueprint, no adaptions had to be applied using the new CKEditor 4 version, CKEditor did some API changes with release of version 4.17.0 which may affect your adaptions.

Note, that as of 4.17.0 the Flash Plugin ( ckeditor.com/cke4/addon/flash ) has been removed from CKEditor 4. If you depend on this plugin, consider carefully, if you may skip the update of net.jangaroo:ckeditor4 .

(CMS-20736)