@cloudcommerce/storefront (>=0.10.0, <=0.11.0), @gspenst/next (>=0.1.0, <=0.1.2) +6 more potentially affected by CVE-2026-108261 via @tinacms/app (>=2.0.0, <=2.5.12)

@tinacms/app NPM version =2.0.0, =0.10.0, =0.1.0, =0.1.0, =0.0.0-00a8b82-20260824011213, =0.0.2, =0.0.3, =0.1.1, =0.1.3 - ramidus 1.2.1 Source cves: CVE-2026-108261 Source advisory: GHSA-X34J-47HF-4XG7...

CVE-2026-108261

creationtimestamp| type| source ---|---|--- 2026-10-09 20:53:22+00:00| seen| https://infosec.exchange/users/cve/statuses/117412934600245223 2026-10-09 21:46:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mxhx65zlvq2g 2026-10-09 22:07:23+00:00| seen|...

@backpackjs/cli (>=1.0.0, <=2.0.0-bundle-perf-test.2), @backpackjs/cms (>=0.0.2, <=4.21.0) +49 more potentially affected by CVE-2026-108261 via tinacms (>=0.0.0-a0a8cb3-20260817041004, <=3.12.1)

tinacms NPM version =0.0.0-a0a8cb3-20260817041004, =1.0.0, =0.0.2, =2.2.0-isolate-nextjs.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.10.0, =0.0.1-beta.1, =0.0.0-20220816134642, =0.0.0-20220903131031, =0.0.4, =0.1.0, =0.0.85, =0.0.89, =0.0.93 and more Source cves: CVE-2026-108261 Source advisory:...