Skip to content
OpenAdvisories

Product · tinacms

@tinacms/mdx

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-126774

    @tinacms/mdx before 2.4.2 Code Injection via MDX Serializer Rich-Text Values

    @tinacms/mdx before 2.4.2 contains a code injection vulnerability in its MDX serializer, which writes rich-text values into MDX expressions without escaping them. Authenticated content editors can save crafted values that break out of list field or highlightC…

    tinacms @tinacms/mdx