Udecode Plate vulnerabilities
- udecode plate @platejs/core HTML deserialization can trigger browser behavior during parsing 6.1 Medium
- udecode plate Plate: SSRF with response disclosure in DOCX image embedding 8.2 High
- udecode plate Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript 8.7 High
- udecode plate Arbitrary DOM attributes in element.attributes and leaf.attributes in Platejs 8.3 High
- udecode plate Cross-site Scripting (XSS) in media embed element when using custom URL parsers in plate media 8.1 High
- udecode plate Cross site scripting (XSS) in @udecode/plate-link 8.1 High