339 matches found
CVE-2025-67843: Improper Neutralization of Special Elements Used in a Template Engine
A Server-Side Template Injection SSTI vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote attackers to execute arbitrary code via inline JSX expressions in an MDX file...
CVE-2025-67843
Mintlify Platform is affected by a Server-Side Template Injection (SSTI) in its MDX Rendering Engine prior to 2025-11-15. The vulnerability allows remote attackers to execute arbitrary code via inline JSX expressions in an MDX file. Affected component: MDX Rendering Engine in Mintlify Platform (p...
EUVD-2025-204427
A Server-Side Template Injection SSTI vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote attackers to execute arbitrary code via inline JSX expressions in an MDX file...
PT-2025-52404
Name of the Vulnerable Software and Affected Versions Mintlify Platform versions prior to 2025-11-15 Description A Server-Side Template Injection SSTI flaw exists in the MDX Rendering Engine of Mintlify Platform. This issue allows remote attackers to execute arbitrary code through inline JSX...
EUVD-2025-177736
Malicious code in multiverse-jsonp-mdx-commitlint-config-angular npm...
EUVD-2025-175807
Malicious code in unuk-loop-mdx-mysql npm...
EUVD-2025-177285
Malicious code in pegasus-mdx-pino-izar npm...
EUVD-2025-177927
Malicious code in mdx-resonance-cryonics-geochemistry npm...
Malicious code in pegasus-mdx-pino-izar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b9b25739f729310e407971211ce7a65d98ec3f75743105e9c830595d96b8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178576
Malicious code in heka-mdx-kaus-indus npm...
EUVD-2025-179149
Malicious code in enceladus-mdx-zenobia-blazar npm...
EUVD-2025-177670
Malicious code in neptune-barnard-mdx-less-loader npm...
EUVD-2025-178534
Malicious code in hermes-version-mdx-yaml npm...
Malicious code in mdx-kaus-browserify-deimos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c35c481bdc9c3cd04791a4bd2aea3c97faf1ab41752bdeaa06954b53da493801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mdx-cluster-oberon-terser (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6b8965688eff1e36ec9fec0425e4607b126d84930fd144532e03bc22d45cf69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178385
Malicious code in install-fork-mdx-websockets npm...
EUVD-2025-177931
Malicious code in mdx-coronalmassejection-tardigrade-paleobotany npm...
EUVD-2025-175424
Malicious code in zenobia-mdx-phoenix-kronos npm...