{"uuid": "d8059950-4139-41df-bf52-97d065e6f23a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65842", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mul46l4zvz2q", "content": "@platejs/docx-io fetches remote image URLs while converting HTML to DOCX, and the fetched image data lands in the generated file (CVE-2026-65842, high). The advisory bounds it to apps converting untrusted HTML server-side or in a privileged environment. #dev", "creation_timestamp": "2026-09-02T23:38:43.317142Z"}