CVE-2025-68278

creationtimestamp| type| source ---|---|--- 2026-01-24 22:43:10+00:00| seen| https://gist.github.com/alon710/d298a5a87b77513c2efac1247ffd11a1 2026-04-10 19:30:17+00:00| published-proof-of-concept| Telegram/nKWnjkmkE0KCaEQFUYveErvXFFBY-D0bq9FDU2ZECdeJKSY...

@tinacms/app (>=2.3.12 <=2.3.15), @tinacms/cli (>=2.0.0 <=2.0.3) +1 more potentially affected by CVE-2025-68278 via tinacms (>=3.0.0 <=3.1.0)

tinacms NPM version =3.0.0, =2.3.12, =2.0.0, =0.1.12, =0.1.15 Source cves: CVE-2025-68278 Source advisory: SNYK:JS-TINACMS-14535449...

@bojidar-bg/tina-mdx-editor (>=0.1.0 <=0.1.1), @bojidar-bg/tina-simple-git-provider (>=0.1.0 <=0.1.1) +28 more potentially affected by CVE-2025-68278 via @tinacms/graphql (>=0.0.0-a1ff961-20250623024558 <=2.0.2)

@tinacms/graphql NPM version =0.0.0-a1ff961-20250623024558, =0.1.0, =0.1.0, =0.1.0, =0.10.0, =0.0.0-20230511135047, =0.0.0-20230511135047, =2.5.8, =0.0.4, =0.0.85, =0.0.89, =0.0.26, =0.0.34, =0.0.0-0a2c557-20250220151224, =0.0.0-0a2c557-20250220151224, =2.0.3 and more Source cves: CVE-2025-68278...

@tinacms/app (>=0.0.0-0b7103c-20251216023146 <=2.3.15), @tinacms/cli (>=0.0.0-0b7103c-20251216023146 <=2.0.3) +4 more potentially affected by CVE-2025-68278 via @tinacms/graphql (>=2.0.0 <=2.0.2)

@tinacms/graphql NPM version =2.0.0, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =2.0.0, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =3.1.0 Source cves: CVE-2025-68278 Source advisory: SNYK:JS-TINACMSGRAPHQL-14535448...

@cloudcommerce/storefront (>=0.10.0 <=0.11.0), @gspenst/next (>=0.0.1 <=0.1.2) +6 more potentially affected by CVE-2025-68278 via @tinacms/cli (>=0.60.28 <=1.12.6)

@tinacms/cli NPM version =0.60.28, =0.10.0, =0.0.1, =0.1.0, =0.0.2, =0.0.3, =0.0.1, =0.1.3 - next-tina-github-starter =0.1.0 - ramidus =1.2.1 Source cves: CVE-2025-68278 Source advisory: OSV:GHSA-529F-9QWM-9628...

@backpackjs/cli (>=1.0.0 <=2.0.0-bundle-perf-test.2), @backpackjs/cms (>=0.0.2 <=4.21.0) +51 more potentially affected by CVE-2025-68278 via tinacms (>=0.0.0-a11f739-20260513041310 <=3.1.0)

tinacms NPM version =0.0.0-a11f739-20260513041310, =1.0.0, =0.0.2, =2.2.0-isolate-nextjs.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.10.0, =0.0.1-beta.1, =0.0.0-20220816134642, =0.0.0-20220903131031, =0.0.4, =0.1.0, =0.0.85, =0.0.89, =0.0.93 and more Source cves: CVE-2025-68278 Source advisory:...

EUVD-2025-68278

Malicious code in riana-donat99-ruro npm...