Skip to content

Mdx version fix to resolve CVE-2026-0969#1415

Open
ashoksrinivasan96 wants to merge 2 commits intomainfrom
mdx-version-fix
Open

Mdx version fix to resolve CVE-2026-0969#1415
ashoksrinivasan96 wants to merge 2 commits intomainfrom
mdx-version-fix

Conversation

@ashoksrinivasan96
Copy link

Description

Currently, the default template deployment build fails with the error message:
Error: Vulnerable version of next-mdx-remote detected (4.4.1). Please update to version 6.0.0 or later. Learn More: https://vercel.link/CVE-2026-0969

This PR bumps up the next-mdx-remote version to 6.0.0

Screenshot of the error

Screenshot 2026-03-02 at 9 00 04 PM

Type of Change

  • New Example
  • Example updates (Bug fixes, new features, etc.)
  • Other (changes to the codebase, but not to examples)

New Example Checklist

  • 🛫 npm run new-example was used to create the example
  • 📚 The template wasn't used but I carefuly read the Adding a new example steps and implemented them in the example
  • 📱 Is it responsive? Are mobile and tablets considered?

…t packages to 3.1.1, and various type definitions. Remove outdated packages and add new dependencies for improved compatibility and functionality.
@vercel
Copy link
Contributor

vercel bot commented Mar 2, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
app-dir-css-in-js Ready Ready Preview, Comment Mar 2, 2026 3:34pm
app-dir-i18n Ready Ready Preview, Comment Mar 2, 2026 3:34pm
app-dir-share-state Ready Ready Preview, Comment Mar 2, 2026 3:34pm
cms-webhook-update-redirects Ready Ready Preview, Comment Mar 2, 2026 3:34pm
custom-error-pages-app-dir Ready Ready Preview, Comment Mar 2, 2026 3:34pm
custom-error-pages-public-dir Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-ab-testing-statsig Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-functions-ab-testing-simple Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-functions-add-header Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-functions-basic-auth-password Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-functions-bot-protection-botd Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-functions-bot-protection-datadome Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-functions-cookies Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-functions-crypto Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-functions-feature-flag-configcat Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-functions-feature-flag-posthog Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-functions-feature-flag-split Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-functions-geolocation Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-functions-hostname-rewrites Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-functions-image-response Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-functions-ip-blocking Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-functions-ip-blocking-datadome Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-functions-json-response Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-functions-jwt-authentication Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-functions-power-parity-pricing Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-functions-power-parity-pricing-strategies Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-functions-query-params-filter Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-functions-redirects-upstash Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-geolocation-country-block Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-maintenance-page Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-middleware-modify-request-header Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-rewrites-upstash Ready Ready Preview, Comment Mar 2, 2026 3:34pm
edge-user-agent-based-rendering Ready Ready Preview, Comment Mar 2, 2026 3:34pm
example-feature-flag-apple-store Ready Ready Preview, Comment Mar 2, 2026 3:34pm
example-reduce-image-bandwidth-usage Ready Ready Preview, Comment Mar 2, 2026 3:34pm
express-vercel Ready Ready Preview, Comment Mar 2, 2026 3:34pm
feature-flag-hypertune Ready Ready Preview, Comment Mar 2, 2026 3:34pm
feature-flag-launchdarkly Error Error Mar 2, 2026 3:34pm
feature-flag-optimizely Ready Ready Preview, Comment Mar 2, 2026 3:34pm
flags-sdk-flagsmith Ready Ready Preview, Comment Mar 2, 2026 3:34pm
flags-sdk-growthbook Ready Ready Preview, Comment Mar 2, 2026 3:34pm
flags-sdk-launchdarkly Ready Ready Preview, Comment Mar 2, 2026 3:34pm
flags-sdk-posthog Ready Ready Preview, Comment Mar 2, 2026 3:34pm
flags-sdk-reflag Ready Ready Preview, Comment Mar 2, 2026 3:34pm
flags-sdk-vercel Ready Ready Preview, Comment Mar 2, 2026 3:34pm
i18n Ready Ready Preview, Comment Mar 2, 2026 3:34pm
microfrontends-docs Ready Ready Preview, Comment Mar 2, 2026 3:34pm
microfrontends-marketing Ready Ready Preview, Comment Mar 2, 2026 3:34pm
mintlify-docs-rewrite Error Error Mar 2, 2026 3:34pm
nodejs-api Ready Ready Preview, Comment Mar 2, 2026 3:34pm
nx-monorepo Ready Ready Preview, Comment Mar 2, 2026 3:34pm
saas-microservices-api Ready Ready Preview, Comment Mar 2, 2026 3:34pm
saas-microservices-api-dashboard Ready Ready Preview, Comment Mar 2, 2026 3:34pm
saas-microservices-api-users Ready Ready Preview, Comment Mar 2, 2026 3:34pm
saas-microservices-dashboard Ready Ready Preview, Comment Mar 2, 2026 3:34pm
single-spa-content-microfrontend Ready Ready Preview, Comment Mar 2, 2026 3:34pm
single-spa-root-microfrontend Ready Ready Preview, Comment Mar 2, 2026 3:34pm
solutions-combining-data-fetching-strategies Ready Ready Preview, Comment Mar 2, 2026 3:34pm
solutions-image-fallback Ready Ready Preview, Comment Mar 2, 2026 3:34pm
solutions-image-offset Ready Ready Preview, Comment Mar 2, 2026 3:34pm
solutions-loading-web-fonts Ready Ready Preview, Comment Mar 2, 2026 3:34pm
solutions-microfrontends Ready Ready Preview, Comment Mar 2, 2026 3:34pm
solutions-microfrontends-docs Ready Ready Preview, Comment Mar 2, 2026 3:34pm
solutions-on-demand-isr Ready Ready Preview, Comment Mar 2, 2026 3:34pm
solutions-pagination-with-ssg Ready Ready Preview, Comment Mar 2, 2026 3:34pm
solutions-reuse-responses Ready Ready Preview, Comment Mar 2, 2026 3:34pm
solutions-script-component-ad Ready Ready Preview, Comment Mar 2, 2026 3:34pm
solutions-script-component-strategies Ready Ready Preview, Comment Mar 2, 2026 3:34pm
solutions-subdomains-auth Ready Ready Preview, Comment Mar 2, 2026 3:34pm
toolbar-feature-flags-sveltekit Ready Ready Preview, Comment Mar 2, 2026 3:34pm
toolbar-launchdarkly Ready Ready Preview, Comment Mar 2, 2026 3:34pm
toolbar-optimizely Ready Ready Preview, Comment Mar 2, 2026 3:34pm
toolbar-split Ready Ready Preview, Comment Mar 2, 2026 3:34pm
toolbar-statsig Ready Ready Preview, Comment Mar 2, 2026 3:34pm
vue Ready Ready Preview, Comment Mar 2, 2026 3:34pm

@socket-security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​next-mdx-remote@​4.4.1 ⏵ 6.0.099100 +161009170

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant