@tinacms App vulnerabilities

• @tinacms app, tinacms +1 more TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment CVE-2026-108261 Fix available 9.3 CriticalOctober 9, 2026