{"action":"Upgrade @platejs/docx-io to 53.3.2 or later.","affected":[{"fixed":"53.3.2","introduced":"0"}],"component":"@platejs/docx-io","cve_ids":["CVE-2026-65842"],"ecosystem":"npm","epss":0.00524,"exploited":false,"fixed_versions":["53.3.2"],"ghsa_id":"GHSA-4q39-2jhr-7qx8","id":"tcs_01M5KF14KXHN32S5KZKKVG3DBT","modified_at":"2026-09-02T22:30:05.279538301Z","published_at":"2026-09-02T22:14:54Z","references":["https://osv.dev/vulnerability/GHSA-4q39-2jhr-7qx8","https://github.com/udecode/plate/security/advisories/GHSA-4q39-2jhr-7qx8","https://nvd.nist.gov/vuln/detail/CVE-2026-65842","https://github.com/udecode/plate/pull/5053","https://github.com/udecode/plate/commit/21aa59926f4bbd421027354823cca09c6700ed73","https://github.com/udecode/plate","https://github.com/udecode/plate/releases/tag/v53.3.2"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-4q39-2jhr-7qx8","url":"https://osv.dev/vulnerability/GHSA-4q39-2jhr-7qx8"}],"summary":"Plate: SSRF with response disclosure in DOCX image embedding"}