85 matches found
Malicious code in slate-error (npm)
The package slate-error was found to contain malicious code...
Malicious code in slate-liquid-asset-loader (npm)
The package slate-liquid-asset-loader was found to contain malicious code...
Malicious code in blank-slate (npm)
The package blank-slate was found to contain malicious code...
Malicious code in slate-sync (npm)
The package slate-sync was found to contain malicious code...
MAL-2025-33406 Malicious code in slate-liquid-asset-loader (npm)
The package slate-liquid-asset-loader was found to contain malicious code...
MAL-2025-33405 Malicious code in slate-error (npm)
The package slate-error was found to contain malicious code...
MAL-2025-33404 Malicious code in slate-common-excludes (npm)
The package slate-common-excludes was found to contain malicious code...
MAL-2025-15802 Malicious code in blank-slate (npm)
The package blank-slate was found to contain malicious code...
MAL-2025-33407 Malicious code in slate-sync (npm)
The package slate-sync was found to contain malicious code...
MAL-2025-33403 Malicious code in slate-babel (npm)
The package slate-babel was found to contain malicious code...
CVE-2023-30963
A security defect was discovered in Foundry Frontend which enabled users to perform Stored XSS attacks in Slate if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.229.0. The service was rolled out to all affected Foundry instances. No further...
CVE-2023-30949
A missing origin validation in Slate sandbox could be exploited by a malicious user to modify the page's content, which could lead to phishing attacks...
CVE-2025-2811: Inefficient Regular Expression Complexity
A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT250...
Malware in rich-text-slate-rc
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in rich-text-slate-rc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1974a05b4def032650d8412ad77b9ee7b6e530942c4a3ccb90e9c07d5b58830a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10780 Malicious code in rich-text-slate-rc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1974a05b4def032650d8412ad77b9ee7b6e530942c4a3ccb90e9c07d5b58830a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-47061 Arbitrary DOM attributes in element.attributes and leaf.attributes in Platejs
Plate is a javascript toolkit that makes it easier for you to develop with Slate, a popular framework for building text editors. One longstanding feature of Plate is the ability to add custom DOM attributes to any element or leaf using the attributes property. These attributes are passed to the...
CVE-2024-47061
The CVE-2024-47061 issue affects Plate editors using @udecode/plate-core, where arbitrary DOM attributes can be injected via nodeProps (often from the attributes property), enabling cross-site scripting (XSS) and potential information exposure (e.g., user IPs and whether a malicious document is o...