@tinacms/web-components vulnerabilities (npm)

1 vulnerability.

• @tinacms/web-components npm @tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSS CVE-2026-108260 Fix available 7.6 HighOctober 9, 2026