What’s Vulnerable › Products

@tinacms web-components vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your @tinacms web-components version is affected

Latest @tinacms web-components vulnerabilities

• CVE-2026-108260 — @tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSS (CVSS 7.6)