Skip to content
OpenAdvisories

Vendor

udecode

6 known vulnerabilities.

Products

plate 6
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-88976

    @platejs/core HTML deserialization can trigger browser behavior during parsing

    Plate is a rich-text editor with AI and shadcn/ui. Prior to 53.3.11, and in the discontinued 54.0.0-beta.0 through 54.0.0-beta.1 builds, Plate core HTML deserialization APIs parse supplied HTML strings in the active document. When an application passes untrus…

    udecode plate @platejs/core npm