@tinacms/mdx vulnerabilities (npm)

1 vulnerability.

• @tinacms/mdx npm TinaCMS rich-text (slatejson) rendering does not sanitize link/image URLs, allowing stored XSS via dangerous URL schemes CVE-2026-55661 Fix available 4.8 MediumJune 18, 2026