tinacms/graphql vulnerabilities

CVEs whose affected-version data names the tinacms/graphql package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-68278High· 8.8

9mo ago

Tina is a headless content management system

Tina is a headless content management system. In tinacms prior to version 3.1.1, tinacms uses the gray-matter package in an insecure way allowing attackers that can control the content of the processed markdown files, e.g., blog posts, t…

▾ Twilightssw · tinacmsEPSS 0.48%via NVD