Bug 2571858 (CVE-2026-126774)
| Summary: | CVE-2026-126774 @tinacms/mdx: @tinacms/mdx: Arbitrary code execution via unescaped rich-text expressions | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | unspecified | Keywords: | Security |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in @tinacms/mdx. This vulnerability allows arbitrary code execution because the MDX serializer writes rich-text values into expressions without proper escaping. An authenticated content editor can exploit this flaw by submitting crafted values into stored content fields. Consequently, the injected code is executed within visitors' web browsers or on backend build and server-side rendering systems.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2026-11-11 18:51:12 UTC
|