tinacms

tinacms is vulnerable to arbitrary code execution

Tina: Path Traversal in Media Upload Handle

@tinacms/graphql has a Path Traversal issue

TinaCMS Vulnerable to Path Traversal Leading to Arbitrary File Read, Write and Delete

TinaCMS CLI Dev Server Vulnerable to Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS

@tinacms/graphql's `FilesystemBridge` Path Validation Can Be Bypassed via Symlinks or Junctions

Sensitive Information leak via Script File in TinaCMS

TinaCMS CLI has Arbitrary File Read via Disabled Vite Filesystem Restriction

@tinacms/graphql has Path Traversal that leads to overwrite of arbitrary files

@tinacms/graphql's Media Endpoints Can Escape the Media Root via Symlinks or Junctions