web-components vulnerabilities

1 known vulnerability in web-components from Tinacms. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.6 High severity

  tinacms: Improper Neutralization of Input During Web Page Generation

  CVE-2026-108260Oct 9, 2026Tinacms

  Tina is a headless content management system. Prior to 0.2.1, the tina-markdown element in packages/@tinacms/web-components/src/tina-markdown.js assigns a rich-text node.url value directly to an anchor href without validating the URL scheme. A content author c