@tinacms/app vulnerabilities

1 known vulnerability in @tinacms/app from Tinacms. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.6 High severity

  tinacms: Improper Neutralization of Input During Web Page Generation

  CVE-2026-55660Jul 1, 2026Tinacms

  Tina is a headless content management system. In versions prior to @tinacms/app 2.5.6 and tinacms 3.9.3, cross-origin postMessage handlers and a rich-text URL-sanitization bypass enable stored XSS and session takeover. The library registers window message list