MAL-2024-9753 Malicious code in payouts-link-ui (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2618 Malicious code in link-ui-i24n (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in link-ui-i23n (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2617 Malicious code in link-ui-i23n (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in link-ui-i22n (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2616 Malicious code in link-ui-i22n (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2615 Malicious code in link-ui-i21n (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in link-ui-i20n (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2614 Malicious code in link-ui-i20n (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2613 Malicious code in link-ui-i19n (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in link-ui-i19n (npm)

--- -= Per source details. Do not edit below this line.=-...

@udecode/plate-link does not sanitize URLs to prevent use of the `javascript:` scheme

Impact Affected versions of the link plugin and link UI component do not sanitize URLs to prevent use of the javascript: scheme. As a result, links with JavaScript URLs can be inserted into the Plate editor through various means, including opening or pasting malicious content. Patches...

PT-2023-24769

Name of the Vulnerable Software and Affected Versions @udecode/plate-link versions prior to 20.0.0 Description The issue arises from the lack of URL sanitization in affected versions of the link plugin and link UI component, allowing links with JavaScript URLs to be inserted into the Plate editor...

CVE-2023-34245: Improper Neutralization of Input During Web Page Generation

@udecode/plate-link is the link handler for the udecode/plate rich-text editor plugin system for Slate & React. Affected versions of the link plugin and link UI component do not sanitize URLs to prevent use of the javascript: scheme. As a result, links with JavaScript URLs can be inserted into th...