@tinacms/mdx vulnerabilities
1 known vulnerability in @tinacms/mdx from Tinacms. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score
Latest first
- 8.2 High severity
@tinacms/mdx: Improper Control of Generation of Code
@tinacms/mdx before 2.4.2 contains a code injection vulnerability in its MDX serializer, which writes rich-text values into MDX expressions without escaping them. Authenticated content editors can save crafted values that break out of list field or highlightCo