Vulnerabilities

TI-2026-60308 CVE-2026-88976 · GHSA-qrfj-mgw8-j9c6

@platejs/core HTML deserialization can trigger browser behavior during parsing

LOW 27

Plate is a rich-text editor with AI and shadcn/ui.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00338 Published 2026-09-16 Fixed in 53.3.11 CWE-79

TI-2026-46915 CVE-2026-65842 · GHSA-4q39-2jhr-7qx8

MEDIUM 42

Plate is a rich-text editor with AI and shadcn/ui.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00524 Published 2026-08-20 Fixed in 53.3.2 CWE-918

TI-2026-40133 CVE-2026-55596 · GHSA-qj6x-xx2h-8hvv

HIGH 73

Plate is a rich-text editor with AI and shadcn/ui.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00306 Published 2026-07-08 Fixed in 53.1.4 CWE-79

TI-2024-31443 CVE-2024-47061 · GHSA-73rg-f94j-xvhx

LOW 37

Plate is a javascript toolkit that makes it easier for you to develop with Slate, a popular framework for building text editors.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00515 Published 2024-09-20 Fixed in 38.0.6, 36.5.9 +1 CWE-79

TI-2024-27043 CVE-2024-40631 · GHSA-h3pq-667x-r789

LOW 36

Plate media is an open source, rich-text editor for React.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00498 Published 2024-07-15 Fixed in 36.0.10 CWE-79

TI-2023-17081 CVE-2023-34245 · GHSA-4882-hxpr-hrvm

LOW 38

@udecode/plate-link is the link handler for the udecode/plate rich-text editor plugin system for Slate & React.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00445 Published 2023-06-09 Fixed in 20.0.0 CWE-79