Tinacms @tinacms/mdx vulnerabilities

• tinacms @tinacms/mdx, tinacms +1 more TinaCMS rich-text (slatejson) rendering does not sanitize link/image URLs, allowing stored XSS via dangerous URL schemes CVE-2026-55661 Fix available 4.8 MediumJune 18, 2026