Ssw Tinacms vulnerabilities

• tinacms, ssw tinacms\/graphql +1 more @tinacms/graphql's `FilesystemBridge` Path Validation Can Be Bypassed via Symlinks or Junctions CVE-2026-34604 Fix available 7.1 HighApril 1, 2026
• tinacms, ssw tinacms\/cli +1 more @tinacms/graphql's Media Endpoints Can Escape the Media Root via Symlinks or Junctions CVE-2026-34603 Fix available 7.1 HighApril 1, 2026
• tinacms, ssw tinacms\/graphql +1 more @tinacms/graphql has Path Traversal that leads to overwrite of arbitrary files CVE-2026-33949 Fix available 8.1 HighMarch 30, 2026
• @tinacms cli, ssw tinacms\/cli +1 more Arbitrary File Read via Disabled Vite Filesystem Restriction in TinaCMS CLI CVE-2026-29066 Fix available 6.2 MediumMarch 12, 2026
• tinacms, ssw tinacms\/cli +1 more Path Traversal in Media Upload Handle in Tina CVE-2026-28791 Fix available 7.4 HighMarch 12, 2026
• @tinacms cli, ssw tinacms\/cli +1 more Path Traversal Leading to Arbitrary File Read, Write and Delete in TinaCMS CVE-2026-28793 Fix available 8.4 HighMarch 12, 2026
• @tinacms cli, ssw tinacms\/cli +1 more Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS CVE-2026-28792 Fix available 9.7 CriticalMarch 12, 2026
• @tinacms graphql, ssw tinacms\/graphql +1 more Path Traversal in @tinacms/graphql CVE-2026-24125 Fix available 6.3 MediumMarch 12, 2026
• ssw tinacms, tinacms\/cli, tinacms\/graphql +2 more tinacms vulnerable to arbitrary code execution CVE-2025-68278 Fix available 7.3 HighDecember 18, 2025
• tinacms, ssw tinacms\/cli +1 more Tina search token leak via lock file in TinaCMS CVE-2024-45391 Fix available 7.5 HighSeptember 3, 2024
• tinacms, ssw tinacms\/cli +1 more Sensitive Information leak via Script File in TinaCMS CVE-2023-25164 Fix available 8.6 HighFebruary 8, 2023