WE
Product
web-components
1
CVEs
0
On KEV
7.6
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add web-components to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-108260 | 7.6 | Oct 9 | @tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSS Affected: < 0.2.1 |
Showing 1