Skip to content
OpenAdvisories
High · 8.3 CVE-2025-67843 EUVD-2025-204427GHSA-6p6p-x42g-j3hv

A Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote atta…

Published Dec 19, 2025 · Updated Dec 23, 2025 · Assigned by mitre

Description

A Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote attackers to execute arbitrary code via inline JSX expressions in an MDX file.

Affected products

VendorProductAffectedFixed
Mintlify Mintlify Platform < 2025-11-15 2025-11-15

References