CVE-2022-25863 The gatsby-plugin-mdx package from 3.0.0 and 3.15.2 is vulnerable to Deserialization of Untrusted Data due to default configurations that are missing input sanitization.
Previously, it was possible to trigger a Denial of Service (DoS) in the plugin via a specially crafted MDX file, by passing a large number