HIGHnpm
GHSA-g5qx-h5f3-mp2f· CVE-2026-55660TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeover
Modified: 9/10/2026
package
npm/@tinacms/app
pkg:npm/%40tinacms/app
package
pkg:npm/%40tinacms/app
TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeover
Modified: 9/10/2026