{"schema":"vulnpedia.research/1","cve":"CVE-2026-108259","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/tinacms/tinacms/security/advisories/GHSA-pwhx-cvv3-qj5c","tags":["x_refsource_CONFIRM","exploit","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:37:19.094Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:37:19.094Z","url":"https://github.com/tinacms/tinacms/security/advisories/GHSA-pwhx-cvv3-qj5c"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-14T02:12:59.336Z","url":"https://github.com/tinacms/tinacms/security/advisories/GHSA-pwhx-cvv3-qj5c"},{"source":"nvd","sourceId":"CVE-2026-108259","modified":"2026-10-16T20:04:29.760","url":"https://github.com/tinacms/tinacms/security/advisories/GHSA-pwhx-cvv3-qj5c"},{"source":"ghsa","sourceId":"GHSA-pwhx-cvv3-qj5c","url":"https://github.com/tinacms/tinacms/security/advisories/GHSA-pwhx-cvv3-qj5c"},{"source":"ghsa","sourceId":"GHSA-pwhx-cvv3-qj5c","modified":"2026-10-09T21:15:04.859057455Z","url":"https://github.com/tinacms/tinacms/security/advisories/GHSA-pwhx-cvv3-qj5c"}]},{"url":"https://github.com/tinacms/tinacms/pull/7526","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:37:19.094Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:37:19.094Z","url":"https://github.com/tinacms/tinacms/pull/7526"},{"source":"nvd","sourceId":"CVE-2026-108259","modified":"2026-10-16T20:04:29.760","url":"https://github.com/tinacms/tinacms/pull/7526"},{"source":"ghsa","sourceId":"GHSA-pwhx-cvv3-qj5c","url":"https://github.com/tinacms/tinacms/pull/7526"},{"source":"ghsa","sourceId":"GHSA-pwhx-cvv3-qj5c","modified":"2026-10-09T21:15:04.859057455Z","url":"https://github.com/tinacms/tinacms/pull/7526"}]},{"url":"https://github.com/tinacms/tinacms/commit/d030d414d39e15de79bf36e4c728d57205e71dde","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:37:19.094Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:37:19.094Z","url":"https://github.com/tinacms/tinacms/commit/d030d414d39e15de79bf36e4c728d57205e71dde"},{"source":"nvd","sourceId":"CVE-2026-108259","modified":"2026-10-16T20:04:29.760","url":"https://github.com/tinacms/tinacms/commit/d030d414d39e15de79bf36e4c728d57205e71dde"},{"source":"ghsa","sourceId":"GHSA-pwhx-cvv3-qj5c","url":"https://github.com/tinacms/tinacms/commit/d030d414d39e15de79bf36e4c728d57205e71dde"},{"source":"ghsa","sourceId":"GHSA-pwhx-cvv3-qj5c","modified":"2026-10-09T21:15:04.859057455Z","url":"https://github.com/tinacms/tinacms/commit/d030d414d39e15de79bf36e4c728d57205e71dde"}]},{"url":"https://github.com/tinacms/tinacms/releases/tag/@tinacms/cli@3.0.0","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:37:19.094Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:37:19.094Z","url":"https://github.com/tinacms/tinacms/releases/tag/@tinacms/cli@3.0.0"},{"source":"nvd","sourceId":"CVE-2026-108259","modified":"2026-10-16T20:04:29.760","url":"https://github.com/tinacms/tinacms/releases/tag/@tinacms/cli@3.0.0"},{"source":"ghsa","sourceId":"GHSA-pwhx-cvv3-qj5c","url":"https://github.com/tinacms/tinacms/releases/tag/@tinacms/cli@3.0.0"},{"source":"ghsa","sourceId":"GHSA-pwhx-cvv3-qj5c","modified":"2026-10-09T21:15:04.859057455Z","url":"https://github.com/tinacms/tinacms/releases/tag/@tinacms/cli@3.0.0"}]},{"url":"https://osv.dev/vulnerability/GHSA-pwhx-cvv3-qj5c","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-pwhx-cvv3-qj5c","modified":"2026-10-09T21:15:04.859057455Z","origins":[{"source":"ghsa","sourceId":"GHSA-pwhx-cvv3-qj5c","url":"https://osv.dev/vulnerability/GHSA-pwhx-cvv3-qj5c"},{"source":"ghsa","sourceId":"GHSA-pwhx-cvv3-qj5c","modified":"2026-10-09T21:15:04.859057455Z","url":"https://osv.dev/vulnerability/GHSA-pwhx-cvv3-qj5c"}]},{"url":"https://github.com/tinacms/tinacms","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-pwhx-cvv3-qj5c","modified":"2026-10-09T21:15:04.859057455Z","origins":[{"source":"ghsa","sourceId":"GHSA-pwhx-cvv3-qj5c","url":"https://github.com/tinacms/tinacms"},{"source":"ghsa","sourceId":"GHSA-pwhx-cvv3-qj5c","modified":"2026-10-09T21:15:04.859057455Z","url":"https://github.com/tinacms/tinacms"}]},{"source":"euvd","sourceId":"EUVD-2026-95987","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95987","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-95987","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95987"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-pwhx-cvv3-qj5c","url":"https://osv.dev/vulnerability/GHSA-pwhx-cvv3-qj5c","ecosystem":"npm","name":"@tinacms/cli","purl":"pkg:npm/%40tinacms/cli","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.0.0"}]}],"databaseSpecific":{"last_known_affected_version_range":"<= 2.7.0","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-pwhx-cvv3-qj5c/GHSA-pwhx-cvv3-qj5c.json"},"modified":"2026-10-09T21:15:04.859057455Z","origins":[{"source":"ghsa","sourceId":"GHSA-pwhx-cvv3-qj5c","modified":"2026-10-09T21:15:04.859057455Z","url":"https://osv.dev/vulnerability/GHSA-pwhx-cvv3-qj5c"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}