TI
Product
@tinacms/mdx
by tinacms · last CVE Jul 1, 2026
1
CVEs
0
On KEV
4.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch

Add @tinacms/mdx to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-55661
4.8
0%
Jul 1
TinaCMS rich-text (slatejson) rendering does not sanitize link/image URLs, allowing stored XSS via dangerous URL schemes
Affected: < 2.1.7
Showing 1