Vulnerabilities
Last updated 3 hours ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
|
|
Tina: Code injection via unescaped Git branch name in generated client source | High Risk 8.2 | 4 hours ago | 4 hours ago |
|
|
@tinacms/cli: Remote Code Execution in @tinacms/cli via Forestry migration — unsanitised __TINA_INTERNAL__ marker in user-controlled YAML labels | High Risk 7.8 | 3 months ago | 29 days ago |
|
|
Sensitive Information leak via Script File in TinaCMS | High Risk 8.6 | 3 years ago | 29 days ago |
|
|
Tina: Cross-origin `POST /media/upload/*` requests can write arbitrary files into the Tina dev server media root | Medium Risk 6.5 | 1 month ago | 1 month ago |
|
|
TinaCMS CLI Dev Server Vulnerable to Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS | Critical 9.6 | 7 months ago | 6 months ago |
|
|
TinaCMS Vulnerable to Path Traversal Leading to Arbitrary File Read, Write and Delete | High Risk 8.4 | 7 months ago | 6 months ago |
|
|
TinaCMS CLI has Arbitrary File Read via Disabled Vite Filesystem Restriction | Medium Risk 6.2 | 7 months ago | 6 months ago |
|
|
tinacms is vulnerable to arbitrary code execution | High Risk 8.0 | 9 months ago | 9 months ago |
|
|
Tina search token leak via lock file in TinaCMS | High Risk 7.5 | 2 years ago | 2 years ago |
Page 1