TinyMCE 6 vulnerability

TinyMCE 7 moved to GPLv2+ license. If that is applicable to your site, you can choose version in the TinyMCE extension's advanced setting, see Using Extensions.

Otherwise, if you still need to use v6 (MIT license). Make sure you use v2026.3. (Note that the developer of TinyMCE has not released fixed version for v6.x yet.)