@tinacms cli vulnerabilities

Newest CVEs

• CVE-2026-108259

  Tina: Code injection via unescaped Git branch name in generated client source

  tinacms · tinacms

  High8.2
• CVE-2026-29066

  Arbitrary File Read via Disabled Vite Filesystem Restriction in TinaCMS CLI

  @tinacms · cli

  Medium6.2
• CVE-2026-28793

  Path Traversal Leading to Arbitrary File Read, Write and Delete in TinaCMS

  @tinacms · cli

  High8.4
• CVE-2026-28792

  Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS

  @tinacms · cli

  Critical9.7