All products

@tinacms/web-components

npm · Package
1 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
@tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSSCVE-2026-108260 · GHSA-C42Q-QVC3-J6VG @tinacms/web-components npm High Fix reported