@tinacms/app
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment | @tinacms/apptinacms | npm | Critical | Fix reported | |
| TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeover | @tinacms/apptinacms | npm | High | Fix reported |