- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 2 · 1 high, 1 medium
- Weekly downloads
- 1,274
- Dependents
- 0
- Registry
- npm
Advisories 2
- CVE-2026-63506High 8.8
Tina: [Broken Access Control] letting any TinaCloud user authorize against any self-hosted site
Affected: fixed in 15.0.1.
- CVE-2026-59992Medium 5.4
Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)
Affected: fixed in 14.0.4.