MEDIUMnpm
GHSA-2vcc-5v34-9jc8· CVE-2026-55661TinaCMS rich-text (slatejson) rendering does not sanitize link/image URLs, allowing stored XSS via dangerous URL schemes
Modified: 9/10/2026
package
npm/@tinacms/mdx
pkg:npm/%40tinacms/mdx
package
pkg:npm/%40tinacms/mdx
TinaCMS rich-text (slatejson) rendering does not sanitize link/image URLs, allowing stored XSS via dangerous URL schemes
Modified: 9/10/2026