gatsby-plugin-mdx vulnerabilities

CVEs whose affected-version data names the gatsby-plugin-mdx package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2022-25863High· 8.1

4y ago

The package gatsby-plugin-mdx before 2.14.1, from 3.0.0 and before 3.15.2 are vulnerable to Deserialization of Untrusted Data when passing input through to the gray-matter package, due to its default configurations that are missing input…

The package gatsby-plugin-mdx before 2.14.1, from 3.0.0 and before 3.15.2 are vulnerable to Deserialization of Untrusted Data when passing input through to the gray-matter package, due to its default configurations that are missing input…

▾ Twilightgatsbyjs · gatsby-plugin-mdxEPSS 2.0%via NVD