@tinacms web-components vulnerabilities
1 published CVE names @tinacms web-components among the affected products.
- 1Published CVEs1 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-108260
@tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSS
tinacms · tinacms
High7.6