CVE-2024-47061
1 advisory.
npm/@udecode/plate-core CVE-2024-47061: high 8.3, EPSS 0.52%
Plate allows arbitrary DOM attributes in element.attributes and leaf.attributes
Action: Upgrade @udecode/plate-core to 21.5.1 or later.
npm i @udecode/plate-core@38.0.6npm i @udecode/plate-core@36.5.9npm i @udecode/plate-core@21.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 37.0.0 | 38.0.6 | - |
| 22.0.0 | 36.5.9 | - |
| 0 | 21.5.1 | - |
Fixed versions
| 38.0.6 | 36.5.9 | 21.5.1 |
Sources
- osv: GHSA-73rg-f94j-xvhx
- https://github.com/udecode/plate/security/advisories/GHSA-73rg-f94j-xvhx
- https://nvd.nist.gov/vuln/detail/CVE-2024-47061
- https://github.com/udecode/plate/commit/16df6074edac22d56c60e0283eae0740230401c9
- https://github.com/udecode/plate
- https://www.npmjs.com/package/patch-package
- https://yarnpkg.com/cli/patch
CVE-2024-47061 · published · modified · JSON