Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

@tinacms/cli

npm

View on github.com · View on npmjs.org

Security Advisories for @tinacms/cli in npm

Moderate
1 day ago

Tina: Cross-origin `POST /media/upload/*` requests can write arbitrary files into the Tina dev server media root GSA_kwCzR0hTQS1yZ3I5LXI3bWotbWY2eM4ABk2n

npm @tinacms/cli
High
2 months ago

@tinacms/cli: Remote Code Execution in @tinacms/cli via Forestry migration — unsanitised __TINA_INTERNAL__ marker in user-controlled YAML labels GSA_kwCzR0hTQS00OTM2LTlocmgtcXFwd84ABZML

npm @tinacms/cli
Moderate
5 months ago

TinaCMS CLI has Arbitrary File Read via Disabled Vite Filesystem Restriction GSA_kwCzR0hTQS1tNDhnLTR3cjItajJoNs4ABTkg

npm @tinacms/cli
High
5 months ago

TinaCMS Vulnerable to Path Traversal Leading to Arbitrary File Read, Write and Delete GSA_kwCzR0hTQS0yZjI0LW1nNHgtNTM0cc4ABTkf

npm @tinacms/cli
Critical
5 months ago

TinaCMS CLI Dev Server Vulnerable to Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS GSA_kwCzR0hTQS04cHczLTltN2YtcTczNM4ABTke

npm @tinacms/cli
High
8 months ago

tinacms is vulnerable to arbitrary code execution GSA_kwCzR0hTQS01MjlmLTlxd20tOTYyOM4ABP86

npm @tinacms/graphql, @tinacms/cli, tinacms
High
almost 2 years ago

Tina search token leak via lock file in TinaCMS GSA_kwCzR0hTQS00cXJtLTloNHItdjJmeM4AA_QA

npm @tinacms/cli
High
over 3 years ago

Sensitive Information leak via Script File in TinaCMS GSA_kwCzR0hTQS1wYzJxLWpjeHEtcmpycs4AAxfT

npm @tinacms/cli

Filter by Severity

High 5 Moderate 2 Critical 1