Threats affecting pkg:npm/@tinacms/mdx

@tinacms/mdx versions before 2.4.2 have a code injection vulnerability in the MDX serializer. Authenticated content editors can inject crafted values that are not properly escaped, allowing execution of arbitrary JavaScript in visitors' browsers or during build and server-side rendering.