@tinacms/app (>=0.0.0-574b548-20260304015858, <=2.5.9), @tinacms/cli (>=0.0.0-1c89c44-20260716070024, <=2.5.5) +1 more potentially affected by CVE-2026-108261 via tinacms (>=3.0.0, <=3.12.1)

tinacms NPM version =3.0.0, =0.0.0-574b548-20260304015858, =0.0.0-1c89c44-20260716070024, =0.0.0-f48009e-20260825053141, =0.2.18 Source cves: CVE-2026-108261 Source advisory: GHSA-X34J-47HF-4XG7...

@tinacms/app (>=0.0.0-574b548-20260304015858, <=2.5.9), @tinacms/cli (>=0.0.0-1c89c44-20260716070024, <=2.5.5) +1 more potentially affected by CVE-2026-108261 via tinacms (>=3.0.0, <=3.12.1)

tinacms NPM version =3.0.0, =0.0.0-574b548-20260304015858, =0.0.0-1c89c44-20260716070024, =0.0.0-f48009e-20260825053141, =0.2.18 Source cves: CVE-2026-108261 Source advisory: OSV:GHSA-X34J-47HF-4XG7...

@tinacms/app (>=0.0.0-574b548-20260304015858, <=2.5.5), @tinacms/cli (>=0.0.0-1d830a0-20260128234746, <=2.5.0) +1 more potentially affected by CVE-2026-55660 via tinacms (>=3.0.0, <=3.9.2)

tinacms NPM version =3.0.0, =0.0.0-574b548-20260304015858, =0.0.0-1d830a0-20260128234746, =0.1.12, =0.2.14 Source cves: CVE-2026-55660 Source advisory: OSV:GHSA-G5QX-H5F3-MP2F...

@tinacms/app (>=0.0.0-574b548-20260304015858, <=2.5.5), @tinacms/cli (>=0.0.0-1d830a0-20260128234746, <=2.5.0) +1 more potentially affected by CVE-2026-55660 via tinacms (>=3.0.0, <=3.9.2)

tinacms NPM version =3.0.0, =0.0.0-574b548-20260304015858, =0.0.0-1d830a0-20260128234746, =0.1.12, =0.2.14 Source cves: CVE-2026-55660 Source advisory: SNYK:JS-TINACMS-17420390...

@tinacms/app (>=0.0.0-574b548-20260304015858, <=2.5.5), @tinacms/cli (>=0.0.0-1d830a0-20260128234746, <=2.5.0) +1 more potentially affected by CVE-2026-55661 via tinacms (>=3.0.0, <=3.9.2)

tinacms NPM version =3.0.0, =0.0.0-574b548-20260304015858, =0.0.0-1d830a0-20260128234746, =0.1.12, =0.2.14 Source cves: CVE-2026-55661 Source advisory: SNYK:JS-TINACMS-17420373...

@tinacms/app (>=0.0.0-20240725232152, <=2.0.3), @tinacms/cli (>=0.0.0-20240725232152, <=1.5.53) +1 more potentially affected by CVE-2026-28791 via tinacms (>=2.0.0, <=2.1.1)

tinacms NPM version =2.0.0, =0.0.0-20240725232152, =0.0.0-20240725232152, =0.0.35, =0.0.37 Source cves: CVE-2026-28791 Source advisory: OSV:GHSA-5HXF-C7J4-279C...

CVE-2025-67846

The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote attackers to bypass security patches and execute downgrade attacks via predictable deployment identifiers on the Vercel preview domain. An attacker can identify the URL structure of a previous deployment that...

CVE-2025-67846

The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote attackers to bypass security patches and execute downgrade attacks via predictable deployment identifiers on the Vercel preview domain. An attacker can identify the URL structure of a previous deployment that...

EUVD-2025-204424

The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote attackers to bypass security patches and execute downgrade attacks via predictable deployment identifiers on the Vercel preview domain. An attacker can identify the URL structure of a previous deployment that...

@tinacms/app (>=0.0.0-0b7103c-20251216023146, <=2.3.15), @tinacms/cli (>=0.0.0-0b7103c-20251216023146, <=2.0.3) +4 more potentially affected by CVE-2025-68278 via @tinacms/graphql (>=2.0.0, <=2.0.2)

@tinacms/graphql NPM version =2.0.0, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =2.0.0, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =0.0.0-0b7103c-20251216023146, =3.1.0 Source cves: CVE-2025-68278 Source advisory: GHSA-529F-9QWM-9628...