57 matches found
@cloudcommerce/storefront (>=0.10.0, <=0.11.0), @gspenst/next (>=0.0.1, <=0.1.2) +6 more potentially affected by CVE-2026-28791 via @tinacms/cli (>=0.60.28, <=1.12.6)
@tinacms/cli NPM version =0.60.28, =0.10.0, =0.0.1, =0.1.0, =0.0.2, =0.0.3, =0.0.1, =0.1.3 - next-tina-github-starter 0.1.0 - ramidus 1.2.1 Source cves: CVE-2026-28791 Source advisory: MEND:CVE-2026-28791...
@cloudcommerce/storefront (>=0.10.0, <=0.11.0), @gspenst/next (>=0.0.1, <=0.1.2) +6 more potentially affected by CVE-2026-28793 via @tinacms/cli (>=0.60.28, <=1.12.6)
@tinacms/cli NPM version =0.60.28, =0.10.0, =0.0.1, =0.1.0, =0.0.2, =0.0.3, =0.0.1, =0.1.3 - next-tina-github-starter 0.1.0 - ramidus 1.2.1 Source cves: CVE-2026-28793 Source advisory: MEND:CVE-2026-28793...
@cloudcommerce/storefront (>=0.10.0, <=0.11.0), @gspenst/next (>=0.0.1, <=0.1.2) +6 more potentially affected by CVE-2026-28792 via @tinacms/cli (>=0.60.28, <=1.12.6)
@tinacms/cli NPM version =0.60.28, =0.10.0, =0.0.1, =0.1.0, =0.0.2, =0.0.3, =0.0.1, =0.1.3 - next-tina-github-starter 0.1.0 - ramidus 1.2.1 Source cves: CVE-2026-28792 Source advisory: MEND:CVE-2026-28792...
@tinacms/app (>=2.3.12, <=2.3.15), @tinacms/cli (>=2.0.0, <=2.0.3) +1 more potentially affected by CVE-2025-68278 via tinacms (>=3.0.0, <=3.1.0)
tinacms NPM version =3.0.0, =2.3.12, =2.0.0, =0.1.12, =0.1.15 Source cves: CVE-2025-68278 Source advisory: GHSA-529F-9QWM-9628...
@tinacms/app (>=0.0.0-0b7103c-20251216023146, <=2.3.15), @tinacms/cli (>=0.0.0-0b7103c-20251216023146, <=2.0.3) +4 more potentially affected by CVE-2025-68278 via @tinacms/graphql (>=2.0.0, <=2.0.2)
@tinacms/graphql NPM version =2.0.0, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =2.0.0, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =3.1.0 Source cves: CVE-2025-68278 Source advisory: GHSA-529F-9QWM-9628...
@cloudcommerce/storefront (>=0.10.0, <=0.11.0), @gspenst/next (>=0.0.1, <=0.1.2) +6 more potentially affected by CVE-2025-68278 via @tinacms/cli (>=0.60.28, <=1.12.6)
@tinacms/cli NPM version =0.60.28, =0.10.0, =0.0.1, =0.1.0, =0.0.2, =0.0.3, =0.0.1, =0.1.3 - next-tina-github-starter 0.1.0 - ramidus 1.2.1 Source cves: CVE-2025-68278 Source advisory: MEND:CVE-2025-68278...
CVE-2024-45391 Tina search token leak via lock file in TinaCMS
Tina is an open-source content management system CMS. Sites building with Tina CMS's command line interface CLI prior to version 1.6.2 that use a search token may be vulnerable to the search token being leaked via lock file tina-lock.json. Administrators of Tina-enabled websites with search setup...
CVE-2024-45391
Tina is an open-source content management system CMS. Sites building with Tina CMS's command line interface CLI prior to version 1.6.2 that use a search token may be vulnerable to the search token being leaked via lock file tina-lock.json. Administrators of Tina-enabled websites with search setup...
@gspenst/next (0.0.1), gspenst (0.0.1) +1 more potentially affected by CVE-2024-45391 via @tinacms/cli (0.60.28)
@tinacms/cli NPM version 0.60.28 is affected by a known vulnerability. The following packages have a transitive dependency on @tinacms/cli and may be impacted: - @gspenst/next 0.0.1 - gspenst 0.0.1 - next-tina-github-starter 0.1.0 Source cves: CVE-2024-45391 Source advisory: MEND:CVE-2024-45391...
Tina search token leak via lock file in TinaCMS
Impact Tina search token leaked via lock file tina-lock.json in TinaCMS. Sites building with @tinacms/cli 1.6.2 that use a search token are impacted. If your Tina-enabled website has search setup, you should rotate that key immediately. Patches This issue has been patched in @tinacms/[email protected]...
CVE-2024-45391: Exposure of Sensitive Information to an Unauthorized Actor
Tina is an open-source content management system CMS. Sites building with Tina CMS's command line interface CLI prior to version 1.6.2 that use a search token may be vulnerable to the search token being leaked via lock file tina-lock.json. Administrators of Tina-enabled websites with search setup...
CVE-2023-25164
Tinacms is a Git-backed headless content management system with support for visual editing. Sites being built with @tinacms/cli = 1.0.0 && 1.0.9 which store sensitive values in the process.env variable are impacted. These values will be added in plaintext to the index.js file. If you're on a...
CVE-2023-25164
Tinacms is a Git-backed headless content management system with support for visual editing. Sites being built with @tinacms/cli = 1.0.0 && 1.0.9 which store sensitive values in the process.env variable are impacted. These values will be added in plaintext to the index.js file. If you're on a...
CVE-2023-25164 Sensitive Information leak via Script File in TinaCMS
Tinacms is a Git-backed headless content management system with support for visual editing. Sites being built with @tinacms/cli = 1.0.0 && 1.0.9 which store sensitive values in the process.env variable are impacted. These values will be added in plaintext to the index.js file. If you're on a...
CVE-2023-25164
The CVE-2023-25164 entry concerns Tinacms where sites built with @tinacms/cli >= 1.0.0 and
CVE-2023-25164: Insertion of Sensitive Information into Log File
Tinacms is a Git-backed headless content management system with support for visual editing. Sites being built with @tinacms/cli = 1.0.0 && 1.0.9 which store sensitive values in the process.env variable are impacted. These values will be added in plaintext to the index.js file. If you're on a...
PT-2023-19949
Name of the Vulnerable Software and Affected Versions @tinacms/cli versions 1.0.0 through 1.0.8 Description Tinacms is a Git-backed headless content management system with support for visual editing. Sites being built with @tinacms/cli that store sensitive values in the process.env variable are...