Threats tagged 'ghsa-8rw5-7g6c-cvqx'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.8	CVE-2026-126774@tinacms/mdx before 2.4.2 contains a code injection vulnerability in its MDX serializer, which writes rich-text values High8.82026-11-11GCVE DatabaseCVE-2026-126774 @tinacms/mdx versions before 2.4.2 have a code injection vulnerability in the MDX serializer. This flaw allows authenticated content editors to inject crafted values into MDX expressions without proper escaping, potentially leading to JavaScript execution in visitors' browsers or during build and server-side rendering. Report on CVE-2026-126774 Vulnerability CWE-94 #ghsa-8rw5-7g6c-cvqx	GCVE Database	2026-11-11

Page 1 of 1