CVE-2026-65842

Plate is a rich-text editor with AI and shadcn/ui. Prior to 53.3.2, @platejs/docx-io fetches remote image URLs while converting attacker-controlled HTML through htmlToDocxBlob in a server-side or privileged environment. The converter can make requests to internal network resources and include the...

com.vladsch.flexmark:flexmark-docx-converter (>=0.50.24, <=0.61.10), org.docx4j:docx4j-diffx (8.1.2) +5 more potentially affected by CVE-2026-53752 via org.docx4j:docx4j-core (8.1.2)

org.docx4j:docx4j-core MAVEN version 8.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.docx4j:docx4j-core and may be impacted: - com.vladsch.flexmark:flexmark-docx-converter =0.50.24, =0.61.10 - org.docx4j:docx4j-diffx 8.1.2 -...