Skip to contentSsw Tinacms\/cli vulnerabilities
- tinacms, ssw tinacms\/cli +1 more@tinacms/graphql's Media Endpoints Can Escape the Media Root via Symlinks or JunctionsCVE-2026-34603Fix available7.1 High
- @tinacms cli, ssw tinacms\/cli +1 moreArbitrary File Read via Disabled Vite Filesystem Restriction in TinaCMS CLICVE-2026-29066Fix available6.2 Medium
- tinacms, ssw tinacms\/cli +1 morePath Traversal in Media Upload Handle in TinaCVE-2026-28791Fix available7.4 High
- @tinacms cli, ssw tinacms\/cli +1 morePath Traversal Leading to Arbitrary File Read, Write and Delete in TinaCMSCVE-2026-28793Fix available8.4 High
- @tinacms cli, ssw tinacms\/cli +1 moreCross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMSCVE-2026-28792Fix available9.7 Critical
- ssw tinacms, tinacms\/cli, tinacms\/graphql +2 moretinacms vulnerable to arbitrary code executionCVE-2025-68278Fix available7.3 High
- tinacms, ssw tinacms\/cli +1 moreTina search token leak via lock file in TinaCMSCVE-2024-45391Fix available7.5 High
- tinacms, ssw tinacms\/cli +1 moreSensitive Information leak via Script File in TinaCMSCVE-2023-25164Fix available8.6 High