What’s Vulnerable › Products

tinacms next-tinacms-azure vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your tinacms next-tinacms-azure version is affected

Latest tinacms next-tinacms-azure vulnerabilities

• CVE-2026-63506 — Tina: [Broken Access Control] letting any TinaCloud user authorize against any self-hosted site (CVSS 8.8)
• CVE-2026-59992 — Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters) (CVSS 5.4)