What’s Vulnerable › Products

@tinacms app vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your @tinacms app version is affected

Latest @tinacms app vulnerabilities

• CVE-2026-108261 — TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment (CVSS 9.3)