SS
Vendor
Ssw
13
CVEs
0
On KEV
0
New 30D
Products
TI9.6
Tinacms/cli
Ssw
8 CVEs0 on KEV0 new
TI8.8
Tinacms/graphql
Ssw
4 CVEs0 on KEV0 new
TI8.8
Tinacms
Ssw
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-34603 | TI Tinacms/cli Ssw | 8.3 | Apr 1 | @tinacms/graphql's Media Endpoints Can Escape the Media Root via Symlinks or Junctions |
| CVE-2026-34604 | TI Tinacms/graphql Ssw | 8.8 | Apr 1 | @tinacms/graphql's `FilesystemBridge` Path Validation Can Be Bypassed via Symlinks or Junctions |
| CVE-2026-33949 | TI Tinacms/graphql Ssw | 8.1 | Apr 1 | @tinacms/graphql has Path Traversal that leads to overwrite of arbitrary files |
| CVE-2026-29066 | TI Tinacms/cli Ssw | 6.2 | Mar 12 | Arbitrary File Read via Disabled Vite Filesystem Restriction in TinaCMS CLI |
| CVE-2026-28791 | TI Tinacms/cli Ssw | 7.4 | Mar 12 | Path Traversal in Media Upload Handle in Tina |
| CVE-2026-28793 | TI Tinacms/cli Ssw | 8.4 | Mar 12 | Path Traversal Leading to Arbitrary File Read, Write and Delete in TinaCMS |
| CVE-2026-28792 | TI Tinacms/cli Ssw | 9.6 | Mar 12 | Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS |
| CVE-2026-24125 | TI Tinacms/graphql Ssw | 6.3 | Mar 12 | Path Traversal in @tinacms/graphql |
| CVE-2025-68278 | TI Tinacms/cli Ssw | 8.8 | Dec 18 | tinacms vulnerable to arbitrary code execution |
| CVE-2024-45391 | TI Tinacms/cli Ssw | 7.5 | Sep 3 | Tina search token leak via lock file in TinaCMS |
| CVE-2023-25164 | TI Tinacms/cli Ssw | 7.5 | Feb 8 | Tinacms is a Git-backed headless content management system with support for visual editing |