@tinacms/cli vulnerabilities (npm)
9 vulnerabilities.
-
@tinacms/clinpm Tina: Code injection via unescaped Git branch name in generated client source 8.2 High -
@tinacms/clinpm Tina: Cross-origin `POST /media/upload/*` requests can write arbitrary files into the Tina dev server media root 6.5 Medium -
@tinacms/clinpm @tinacms/cli: Remote Code Execution via Forestry migration — unsanitised __TINA_INTERNAL__ marker in user-controlled YAML labels 7.8 High -
@tinacms/clinpm Arbitrary File Read via Disabled Vite Filesystem Restriction in TinaCMS CLI 6.2 Medium -
@tinacms/clinpm Path Traversal Leading to Arbitrary File Read, Write and Delete in TinaCMS 8.4 High -
@tinacms/clinpm Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS 9.7 Critical -
@tinacms/clinpm tinacms vulnerable to arbitrary code execution 7.3 High -
@tinacms/clinpm Tina search token leak via lock file in TinaCMS 7.5 High -
@tinacms/clinpm Sensitive Information leak via Script File in TinaCMS 8.6 High