---
title: "TinyMCE 6.3.2"
description: "Release notes for TinyMCE 6.3.2"
canonical_url: "https://www.tiny.cloud/docs/tinymce/6/6.3.2-release-notes/"
md_url: "https://www.tiny.cloud/docs/tinymce/6/6.3.2-release-notes/index.md"
version: "6"
last_updated: "2023-08-07T08:03:35Z"
tokens: 1180
---
Important This page documents TinyMCE 6. For new projects, Tiny recommends using the latest, most up-to-date version. [See TinyMCE 8 documentation](../../latest/).
# TinyMCE 6.3.2

> **Note:** These are the Tiny Cloud and TinyMCE Enterprise release notes. For information on the latest community version of TinyMCE, see the [TinyMCE Changelog](../changelog/).

## Overview

TinyMCE 6.3.2 was released for TinyMCE Enterprise and Tiny Cloud on Wednesday, March 1 st, 2023. It includes TinyMCE 6.3.2. These release notes provide an overview of the changes for TinyMCE 6.3.2:

- [Accompanying Premium self-hosted server-side component changes](#accompanying-premium-self-hosted-server-side-component-changes)
- [Bug fix](#bug-fix)
- [Security fixes](#security-fixes)

## Accompanying Premium self-hosted server-side component changes

The TinyMCE 6.3.2 release includes accompanying changes affecting the TinyMCE **self-hosted** services for the following plugins:

- Enhanced Media Embed plugin (`mediaembed`)
- Export plugin (`export`)
- Enhanced Image Editing plugin (`editimage`)
- Link Checker plugin (`linkchecker`)
- Spell Checker Pro plugin (`tinymcespellchecker`)
- Spelling Autocorrect plugin (`autocorrect`)

For information on:

- The Enhanced Media Embed plugin, see: [Enhanced Media Embed plugin](../introduction-to-mediaembed/).
- The Export plugin, see: [Export plugin](../export/).
- The Enhanced Image Editing plugin, see: [Enhanced Image Editing plugin](../editimage/).
- The Link Checker plugin, see: [Link Checker plugin](../linkchecker/).
- The Spell Checker Pro plugin, see: [Spell Checker Pro plugin](../introduction-to-tiny-spellchecker/).
- The Spelling Autocorrect plugin, see: [Spelling Autocorrect plugin](../autocorrect/).
- Deploying the server-side components, see: [Server-side component installation](../introduction-to-premium-selfhosted-services/).

The Java server-side components have been updated to the following versions:

- `ephox-hyperlinking.war`: 2.105.14
- `ephox-image-proxy.war`: 2.106.5
- `ephox-spelling.war`: 2.118.7

### Updating the self-hosted server-side components

The new versions of the server-side services provide updates for the Java-based server-side components. To deploy the updated version of the server-side components:

1. Update your Java Application Server to the minimum required version:

  - Eclipse Jetty:

    - 9.4+
  - WebSphere Application Server (WAS) 8 or later
  - Apache Tomcat:

    - 10 (See note below)
    - 9+
    - 8.5.12+
    - 8.0.42+
    - 7.0.76+

> **Important:** Tomcat 10 will require WAR files to be placed in the *webapp-javaee* directory rather than the *webapps* directory due to the change to Jakarta servlets. Jetty 11 is not currently supported due to this change.
2. Replace the existing server-side `.war` files with the `.war` files bundled with TinyMCE 6.3.2 or later.

For information on:

- Deploying the server-side components, see: [Server-side component installation](../introduction-to-premium-selfhosted-services/).
- Deploying the server-side components using Docker, see: [Containerized service deployments](../bundle-intro-setup/).

> **Note:** There are no functionality changes in these updated server-side components.

## Bug fix

TinyMCE 6.3.2 also includes the following bug fix:

### Removed a workaround for ensuring stylesheets are loaded in an outdated version of webkit

In certain webkit browsers the onload event wasn’t supported due to an old `bug` within TinyMCE. A workaround was implemented that manually checked that `stylesheets` were being loaded rather than relying on the event being triggered. Due to this `bug`, a fixed was applied to the onload event, to ensure that it is now supported by webkit.

The previous workaround has now been removed and replaced with the native browser event.

In TinyMCE 6.3, the onload event `error` that stopped stylesheets to load have now been fixed with the new native browser implementation.

## Security fixes

TinyMCE 6.3.2 includes fixes for the following security issues:

All 3 server-side components have been updated to include dependency updates addressing the following security issues.

- [CVE-2022-41881](https://nvd.nist.gov/vuln/detail/CVE-2022-41881)
- [CVE-2022-41915](https://nvd.nist.gov/vuln/detail/CVE-2022-41915)
- [CVE-2023-22465](https://nvd.nist.gov/vuln/detail/CVE-2023-22465)

This update includes both Medium and High severity vulnerability fixes.

For information on the server-side components updates, see: [Accompanying Premium self-hosted server-side component changes](#accompanying-premium-self-hosted-server-side-component-changes).

> **Note:** There are no functionality changes in these updated server-side components.