CVE-2026-55596
1 advisory.
npm/@platejs/media CVE-2026-55596: high 8.7
Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript
Action: Upgrade @platejs/media to 53.1.4 or later.
npm i @platejs/media@53.1.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 53.0.0 | 53.1.4 | - |
Fixed versions
| 53.1.4 |
Sources
- osv: GHSA-qj6x-xx2h-8hvv
- https://github.com/udecode/plate/security/advisories/GHSA-qj6x-xx2h-8hvv
- https://nvd.nist.gov/vuln/detail/CVE-2026-55596
- https://github.com/udecode/plate/pull/5014
- https://github.com/udecode/plate/commit/6214914ca811adf22d0ad503154494216eed68ba
- https://github.com/udecode/plate
- https://github.com/udecode/plate/releases/tag/v53.1.4
CVE-2026-55596 · published · modified · JSON