@platejs/docx-io vulnerabilities

CVEs whose affected-version data names the @platejs/docx-io package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-65842High· 8.2

1mo ago

Plate is a rich-text editor with AI and shadcn/ui

Plate is a rich-text editor with AI and shadcn/ui. Prior to 53.3.2, @platejs/docx-io fetches remote image URLs while converting attacker-controlled HTML through htmlToDocxBlob in a server-side or privileged environment. The converter can…

▾ Twilightplatejs · @platejs/docx-ioEPSS 0.30%via NVD