TI
Product
Tinacms/cli
8
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 1Low 0
Watch
Add Tinacms/cli to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-28792 | 9.6 | Mar 12 | Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS Affected: before 2.1.8 |
| CVE-2025-68278 | 8.8 | Dec 18 | tinacms vulnerable to arbitrary code execution Affected: before 2.0.4 |
| CVE-2026-28793 | 8.4 | Mar 12 | Path Traversal Leading to Arbitrary File Read, Write and Delete in TinaCMS Affected: before 2.1.8 |
| CVE-2026-34603 | 8.3 | Apr 1 | @tinacms/graphql's Media Endpoints Can Escape the Media Root via Symlinks or Junctions Affected: through 2.2.1 |
| CVE-2024-45391 | 7.5 | Sep 3 | Tina search token leak via lock file in TinaCMS Affected: before 1.6.2 |
| CVE-2023-25164 | 7.5 | Feb 8 | Tinacms is a Git-backed headless content management system with support for visual editing Affected: 1.0.0 before 1.0.9 |
| CVE-2026-28791 | 7.4 | Mar 12 | Path Traversal in Media Upload Handle in Tina Affected: before 2.1.7 |
| CVE-2026-29066 | 6.2 | Mar 12 | Arbitrary File Read via Disabled Vite Filesystem Restriction in TinaCMS CLI Affected: before 2.1.8 |
Showing 8