tinacms

Friday, October 9

• GitHub CVE-2026-108261
  TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment

  • tinacms tinacms
  • Critical
  • CVSS 9.3
  • EPSS 0.16%
  • Fixed version listed
  20:56 UTC