What’s Vulnerable › Products

tinacms @tinacms/app vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your tinacms @tinacms/app version is affected

Latest tinacms @tinacms/app vulnerabilities

• CVE-2026-55660 — TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeover (CVSS 7.6)