@tinacms/app
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- npm
- Vulnerability status
- 2 advisory(ies) without a verdict
Advisories (2)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-g5qx-h5f3-mp2f TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeover | < 2.5.6 | Undetermined |
| GHSA-x34j-47hf-4xg7 TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment | < 2.5.14 | Undetermined |
Sources
| Source | Licence |
|---|