CVE-2026-55596: Pre-Auth XSS in @platejs/media due to URL sanitization bypass in media embed

github.com 2026-07-09查看中文 →

Security AdvisoryCVE-2026-55596Highudecode/plate

Affected:

>@platejs/media >= 53.0.0, < 53.1.4

Fixed in:

>= 53.1.4

Referenced CVEs: CVE-2026-55596 · 8.7

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Gleam Hex Package Metadata Verification Bypass (CVE-2023-50247) 2026-07-29 Gleam Registry Signature Verification Bypass via Hex API Response Manipulation 2026-07-29 Code Injection RCE in swagger-typescript-api via unescaped enum values 2026-07-29 RCE via Code Injection in swagger-typescript-api axios http-client template 2026-07-29 GitLab Undocumented HTTP Method Permission Bypass on Config/Blob Upload Endpoints (CVE-2025-6674) 2026-07-29

Offline Archive

Offline screenshot & PDF are Pro-exclusive