Vulnerabilities
TinaCMS CLI high-severity injection flaw fixed in version 3.0.0
A crafted Git branch name can inject JavaScript into TinaCMS CLI builds, allowing attackers to steal credentials or alter deployment artifacts before version 3.0.0.
TinaCMS
Everything Threat Times has reported about TinaCMS: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
TinaCMS Patch Fixes Critical Auth Bypass in Admin Preview Route
A critical vulnerability in TinaCMS allows attackers to hijack editor sessions via crafted links, but a patch is now available for affected versions.