Tina

    Dashboard / Vendors

    Products: 5
    Vulnerabilities: 18
    Known Exploited: 0
    2
    Critical Level Threats
    10
    High Level Threats
    4
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-108261

    TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment

    Last Modified: Oct 13, 2026
    Published: Oct 09, 2026

    CVE-2026-108260

    @tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSS

    Last Modified: Oct 13, 2026
    Published: Oct 09, 2026

    CVE-2026-108259

    Tina: Code injection via unescaped Git branch name in generated client source

    Last Modified: Oct 14, 2026
    Published: Oct 09, 2026

    CVE-2026-63506

    Tina: [Broken Access Control] letting any TinaCloud user authorize against any self-hosted site

    Last Modified: Sep 18, 2026
    Published: Sep 16, 2026

    CVE-2026-63123

    Tina: Cross-origin `POST /media/upload/*` requests can write arbitrary files into the Tina dev server media root

    Last Modified: Aug 25, 2026
    Published: Aug 19, 2026
    Items Per Page