12 matches found
MAL-2024-9753 Malicious code in payouts-link-ui (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2618 Malicious code in link-ui-i24n (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in link-ui-i23n (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2617 Malicious code in link-ui-i23n (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in link-ui-i22n (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2616 Malicious code in link-ui-i22n (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2615 Malicious code in link-ui-i21n (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2614 Malicious code in link-ui-i20n (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in link-ui-i20n (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in link-ui-i19n (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2613 Malicious code in link-ui-i19n (npm)
--- -= Per source details. Do not edit below this line.=-...
@udecode/plate-link does not sanitize URLs to prevent use of the `javascript:` scheme
Impact Affected versions of the link plugin and link UI component do not sanitize URLs to prevent use of the javascript: scheme. As a result, links with JavaScript URLs can be inserted into the Plate editor through various means, including opening or pasting malicious content. Patches...