Gatsby-plugin-mdx vulnerabilities
We track 1 vulnerability in Gatsby-plugin-mdx products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 10, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Gatsby-plugin-mdx vulnerabilities
- 9.8 Critical severity
gatsby-plugin-mdx: Deserialization of Untrusted Data
The package gatsby-plugin-mdx before 2.14.1, from 3.0.0 and before 3.15.2 are vulnerable to Deserialization of Untrusted Data when passing input through to the gray-matter package, due to its default configurations that are missing input sanitization. Exploiti