CVE-2024-40631
1 advisory.
npm/@udecode/plate-media CVE-2024-40631: high 8.1
Plate media plugins has a XSS in media embed element when using custom URL parsers
Action: Upgrade @udecode/plate-media to 36.0.10 or later.
npm i @udecode/plate-media@36.0.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 36.0.10 | - |
Fixed versions
| 36.0.10 |
Sources
- osv: GHSA-h3pq-667x-r789
- https://github.com/udecode/plate/security/advisories/GHSA-h3pq-667x-r789
- https://nvd.nist.gov/vuln/detail/CVE-2024-40631
- https://github.com/udecode/plate/commit/1bc0971774fbfb770780c9bdb94746a6f0f196a0
- https://github.com/udecode/plate
- https://stackoverflow.com/a/43467144
CVE-2024-40631 · published · modified · JSON