What’s Vulnerable › Products

tinacms @tinacms/mdx vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your tinacms @tinacms/mdx version is affected

Latest tinacms @tinacms/mdx vulnerabilities

• CVE-2026-55661 — TinaCMS rich-text (slatejson) rendering does not sanitize link/image URLs, allowing stored XSS via dangerous URL schemes (CVSS 4.8)