What’s Vulnerable › Products

@tinacms graphql vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your @tinacms graphql version is affected

Latest @tinacms graphql vulnerabilities

• CVE-2026-34604 — @tinacms/graphql's `FilesystemBridge` Path Validation Can Be Bypassed via Symlinks or Junctions (CVSS 8.8)
• CVE-2026-33949 — @tinacms/graphql has Path Traversal that leads to overwrite of arbitrary files (CVSS 8.1)
• CVE-2026-24125 — Path Traversal in @tinacms/graphql (CVSS 6.3)
• CVE-2025-68278 — tinacms vulnerable to arbitrary code execution (CVSS 8.8)