udecode plate vulnerabilities
6 published CVEs name udecode plate among the affected products.
- 6Published CVEs6 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-88976
@platejs/core HTML deserialization can trigger browser behavior during parsing
udecode · plate
Medium6.1 - CVE-2026-65842
Plate: SSRF with response disclosure in DOCX image embedding
udecode · plate
High8.2 - CVE-2026-55596
Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript
udecode · plate
High8.7 - CVE-2024-47061
Arbitrary DOM attributes in element.attributes and leaf.attributes in Platejs
udecode · plate
High8.3 - CVE-2024-40631
Cross-site Scripting (XSS) in media embed element when using custom URL parsers in plate media
udecode · plate
High8.1 - CVE-2023-34245
Cross site scripting (XSS) in @udecode/plate-link
udecode · plate
High8.1