Skip to content
OpenAdvisories

Package · npm

gatsby-plugin-mdx

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.1
    CVE-2022-25863

    Deserialization of Untrusted Data

    The package gatsby-plugin-mdx before 2.14.1, from 3.0.0 and before 3.15.2 are vulnerable to Deserialization of Untrusted Data when passing input through to the gray-matter package, due to its default configurations that are missing input sanitization. Exploit…

    gatsby-plugin-mdx npm