Skip to content

next-tinacms-azure vulnerabilities (npm)

2 vulnerabilities.

next-tinacms-azure npmTina: [Broken Access Control] letting any TinaCloud user authorize against any self-hosted siteCVE-2026-63506Fix available8.8 HighSeptember 16, 2026
next-tinacms-azure npmTina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)CVE-2026-59992Fix available5.4 MediumAugust 19, 2026