@tinacms Web-components vulnerabilities

• @tinacms web-components, tinacms +1 more @tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSS CVE-2026-108260 Fix available 7.6 HighOctober 9, 2026