Skip to content
OpenAdvisories

Package · npm

@tinacms/graphql

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-24125

    Path Traversal in @tinacms/graphql

    Tina is a headless content management system. Prior to 2.1.2, TinaCMS allows users to create, update, and delete content documents using relative file paths (relativePath, newRelativePath) via GraphQL mutations. Under certain conditions, these paths are combi…

    tinacms graphql @tinacms/graphql npm