@tinacms/mdx vulnerabilities

CVEs whose affected-version data names the @tinacms/mdx package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-55661Medium

TinaCMS rich-text (slatejson) rendering does not sanitize link/image URLs, allowing stored XSS via dangerous URL schemes

TinaCMS rich-text (slatejson) rendering does not sanitize link/image URLs, allowing stored XSS via dangerous URL schemes

▾ Sunlittinacms · tinacmsEPSS 0.40%via GHSA

@tinacms/mdx vulnerabilities (CVEs) · VulnSea