Deserialization Of Untrusted Data
gatsby-plugin-mdx is vulnerable to deserialization of untrusted data. The vulnerability exists when passing input into grey-matter because the default configuration doesn't properly sanitize the input which allows an attacker to bypass and inject untrusted input into MDX files...