HIGH8.7npm
GHSA-qj6x-xx2h-8hvv· CVE-2026-55596Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript
Modified: 8/26/2026
package
npm/@platejs/media
pkg:npm/%40platejs/media
package
pkg:npm/%40platejs/media
Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript
Modified: 8/26/2026