AP
Product
app
by @tinacms · last CVE Oct 9, 2026
1
CVEs
0
On KEV
9.3
Max CVSS
1
New 30D
Severity mix
Critical 1High 0Medium 0Low 0
Watch

Add app to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-108261
9.3
0%
Oct 9
TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment
Affected: < 2.5.14
Showing 1