CVE-2026-126774

The @tinacms/mdx package before version 2.4.2 is vulnerable to a code injection vulnerability within its MDX serializer . The root cause is the failure to escape rich-text values when they are written into MDX expressions. This allows authenticated content editors to save crafted values that can ...