Skip to content
OpenAdvisories

Package · npm

next-mdx-remote

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.8
    CVE-2026-0969

    Arbitrary code execution in React server-side rendering of untrusted MDX content

    The serialize function used to compile MDX in next-mdx-remote is vulnerable to arbitrary code execution due to insufficient sanitization of MDX content. This vulnerability, CVE-2026-0969, is fixed in next-mdx-remote 6.0.0.

    HashiCorp Shared library next-mdx-remote npm