CVE record · 1 source
CVE-2026-108261
CVSS 9.3Tina is a headless content management system.
- CVSS
- 9.3
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Tina is a headless content management system.
Tina is a headless content management system. Prior to tinacms 3.14.0 and @tinacms/app 2.5.14, the /~/* admin preview route in packages/tinacms/src/admin/index.tsx can turn an attacker-controlled hash-router splat into an…