1 matches found
Deserialization Of Untrusted Data
gatsby-plugin-mdx is vulnerable to deserialization of untrusted data. The vulnerability exists when passing input into grey-matter because the default configuration doesn't properly sanitize the input which allows an attacker to bypass and inject untrusted input into MDX files...
9.8CVSS8.9AI score0.01905EPSS
SaveExploits1References5Affected Software1
20