@tinacms/app (>=2.3.12, <=2.3.24), @tinacms/cli (>=0.0.0-1d830a0-20260128234746, <=2.1.5) +1 more potentially affected by CVE-2026-55660 via tinacms (>=3.0.0, <=3.4.1)

tinacms NPM version =3.0.0, =2.3.12, =0.0.0-1d830a0-20260128234746, =0.1.12, =0.1.24 Source cves: CVE-2026-55660 Source advisory: OSV:GHSA-G5QX-H5F3-MP2F...

@tinacms/app (>=0.0.0-20240725232152, <=2.0.3), @tinacms/cli (>=0.0.0-20240725232152, <=1.5.53) +1 more potentially affected by CVE-2026-28791 via tinacms (>=2.0.0, <=2.1.1)

tinacms NPM version =2.0.0, =0.0.0-20240725232152, =0.0.0-20240725232152, =0.0.35, =0.0.37 Source cves: CVE-2026-28791 Source advisory: OSV:GHSA-5HXF-C7J4-279C...

CVE-2025-67846

The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote attackers to bypass security patches and execute downgrade attacks via predictable deployment identifiers on the Vercel preview domain. An attacker can identify the URL structure of a previous deployment that...

CVE-2025-67846

The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote attackers to bypass security patches and execute downgrade attacks via predictable deployment identifiers on the Vercel preview domain. An attacker can identify the URL structure of a previous deployment that...

EUVD-2025-204424

The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote attackers to bypass security patches and execute downgrade attacks via predictable deployment identifiers on the Vercel preview domain. An attacker can identify the URL structure of a previous deployment that...