@tinacms/cli vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-54074High@tinacms/cli: @tinacms/cli: Remote Code Execution in @tinacms/cli via Forestry migration — unsanitised __TINA_INTERNAL__ marker in user-controlled YAML…CVE-2026-29066Medium@tinacms/cli: TinaCMS CLI has Arbitrary File Read via Disabled Vite Filesystem Restriction CVE-2026-28793High@tinacms/cli: TinaCMS Vulnerable to Path Traversal Leading to Arbitrary File Read, Write and Delete CVE-2026-28792Critical@tinacms/cli: TinaCMS CLI Dev Server Vulnerable to Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS CVE-2025-68278Hightinacms: tinacms is vulnerable to arbitrary code execution CVE-2024-45391High@tinacms/cli: Tina search token leak via lock file in TinaCMS CVE-2023-25164High@tinacms/cli: Sensitive Information leak via Script File in TinaCMS

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo