All products

@tinacms/graphql

npm · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
@tinacms/graphql has Path Traversal that leads to overwrite of arbitrary filesCVE-2026-33949 · GHSA-V9P7-GF3Q-H779 @tinacms/graphql npm High Fix reported
@tinacms/graphql's `FilesystemBridge` Path Validation Can Be Bypassed via Symlinks or JunctionsCVE-2026-34604 · GHSA-G9C2-GF25-3X67 @tinacms/graphql npm High Fix reported
@tinacms/graphql's Media Endpoints Can Escape the Media Root via Symlinks or JunctionsCVE-2026-34603 · GHSA-G87C-R2JP-293W @tinacms/graphql npm High Fix reported
@tinacms/graphql has a Path Traversal issueCVE-2026-24125 · GHSA-2238-XC5R-V9HJ @tinacms/graphql npm Medium Fix reported
tinacms is vulnerable to arbitrary code executionCVE-2025-68278 · GHSA-529F-9QWM-9628 @tinacms/cli@tinacms/graphql npm High Fix reported