CVE-2026-126774
high@tinacms/mdx before 2.4.2 contains a code injection vulnerability in its MDX serializer, which writes rich-text values into MDX expressions without escaping th…
@tinacms/mdx before 2.4.2 contains a code injection vulnerability in its MDX serializer, which writes rich-text values into MDX expressions without escaping them. Authenticated content editors can save crafted values that break out of list field or highlightColor expressions in the stored .mdx file, executing JavaScript in visitors' browsers or on build and server-side rendering hosts.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N Affected products
Not reported by the source (unknown — not "none").
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- https://github.com/tinacms/tinacms/blob/%40tinacms/mdx%400.60.3/packages/%40tinacms/mdx/sr... disclosure@vulncheck.com
- https://github.com/tinacms/tinacms/commit/19285c6deeee52c380e8b2fdeafedc9530dc0618 disclosure@vulncheck.com
- https://github.com/tinacms/tinacms/pull/7958 disclosure@vulncheck.com
- https://github.com/tinacms/tinacms/releases/tag/%40tinacms/mdx%402.4.2 disclosure@vulncheck.com
- https://github.com/tinacms/tinacms/security/advisories/GHSA-6vw5-w22x-ghxv disclosure@vulncheck.com
- https://www.vulncheck.com/advisories/tinacms-mdx-before-2.4.2-code-injection-via-mdx-seria... disclosure@vulncheck.com