{"schema":"vulnpedia.research/1","cve":"CVE-2026-108260","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/tinacms/tinacms/security/advisories/GHSA-c42q-qvc3-j6vg","tags":["x_refsource_CONFIRM","exploit","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:40:37.228Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:40:37.228Z","url":"https://github.com/tinacms/tinacms/security/advisories/GHSA-c42q-qvc3-j6vg"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-13T15:17:14.297Z","url":"https://github.com/tinacms/tinacms/security/advisories/GHSA-c42q-qvc3-j6vg"},{"source":"nvd","sourceId":"CVE-2026-108260","modified":"2026-10-16T20:04:29.760","url":"https://github.com/tinacms/tinacms/security/advisories/GHSA-c42q-qvc3-j6vg"},{"source":"ghsa","sourceId":"GHSA-c42q-qvc3-j6vg","url":"https://github.com/tinacms/tinacms/security/advisories/GHSA-c42q-qvc3-j6vg"},{"source":"ghsa","sourceId":"GHSA-c42q-qvc3-j6vg","modified":"2026-10-09T21:15:04.363433366Z","url":"https://github.com/tinacms/tinacms/security/advisories/GHSA-c42q-qvc3-j6vg"}]},{"url":"https://github.com/tinacms/tinacms/pull/7523","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:40:37.228Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:40:37.228Z","url":"https://github.com/tinacms/tinacms/pull/7523"},{"source":"nvd","sourceId":"CVE-2026-108260","modified":"2026-10-16T20:04:29.760","url":"https://github.com/tinacms/tinacms/pull/7523"},{"source":"ghsa","sourceId":"GHSA-c42q-qvc3-j6vg","url":"https://github.com/tinacms/tinacms/pull/7523"},{"source":"ghsa","sourceId":"GHSA-c42q-qvc3-j6vg","modified":"2026-10-09T21:15:04.363433366Z","url":"https://github.com/tinacms/tinacms/pull/7523"}]},{"url":"https://github.com/tinacms/tinacms/commit/5295e077f0d279c35686a0e481a15e33a4877e3b","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:40:37.228Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:40:37.228Z","url":"https://github.com/tinacms/tinacms/commit/5295e077f0d279c35686a0e481a15e33a4877e3b"},{"source":"nvd","sourceId":"CVE-2026-108260","modified":"2026-10-16T20:04:29.760","url":"https://github.com/tinacms/tinacms/commit/5295e077f0d279c35686a0e481a15e33a4877e3b"},{"source":"ghsa","sourceId":"GHSA-c42q-qvc3-j6vg","url":"https://github.com/tinacms/tinacms/commit/5295e077f0d279c35686a0e481a15e33a4877e3b"},{"source":"ghsa","sourceId":"GHSA-c42q-qvc3-j6vg","modified":"2026-10-09T21:15:04.363433366Z","url":"https://github.com/tinacms/tinacms/commit/5295e077f0d279c35686a0e481a15e33a4877e3b"}]},{"url":"https://github.com/tinacms/tinacms/releases/tag/@tinacms/web-components@0.2.1","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:40:37.228Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:40:37.228Z","url":"https://github.com/tinacms/tinacms/releases/tag/@tinacms/web-components@0.2.1"},{"source":"nvd","sourceId":"CVE-2026-108260","modified":"2026-10-16T20:04:29.760","url":"https://github.com/tinacms/tinacms/releases/tag/@tinacms/web-components@0.2.1"},{"source":"ghsa","sourceId":"GHSA-c42q-qvc3-j6vg","url":"https://github.com/tinacms/tinacms/releases/tag/@tinacms/web-components@0.2.1"},{"source":"ghsa","sourceId":"GHSA-c42q-qvc3-j6vg","modified":"2026-10-09T21:15:04.363433366Z","url":"https://github.com/tinacms/tinacms/releases/tag/@tinacms/web-components@0.2.1"}]},{"url":"https://osv.dev/vulnerability/GHSA-c42q-qvc3-j6vg","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-c42q-qvc3-j6vg","modified":"2026-10-09T21:15:04.363433366Z","origins":[{"source":"ghsa","sourceId":"GHSA-c42q-qvc3-j6vg","url":"https://osv.dev/vulnerability/GHSA-c42q-qvc3-j6vg"},{"source":"ghsa","sourceId":"GHSA-c42q-qvc3-j6vg","modified":"2026-10-09T21:15:04.363433366Z","url":"https://osv.dev/vulnerability/GHSA-c42q-qvc3-j6vg"}]},{"url":"https://github.com/tinacms/tinacms","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-c42q-qvc3-j6vg","modified":"2026-10-09T21:15:04.363433366Z","origins":[{"source":"ghsa","sourceId":"GHSA-c42q-qvc3-j6vg","url":"https://github.com/tinacms/tinacms"},{"source":"ghsa","sourceId":"GHSA-c42q-qvc3-j6vg","modified":"2026-10-09T21:15:04.363433366Z","url":"https://github.com/tinacms/tinacms"}]},{"source":"euvd","sourceId":"EUVD-2026-95989","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95989","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-95989","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95989"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-c42q-qvc3-j6vg","url":"https://osv.dev/vulnerability/GHSA-c42q-qvc3-j6vg","ecosystem":"npm","name":"@tinacms/web-components","purl":"pkg:npm/%40tinacms/web-components","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.2.1"}]}],"databaseSpecific":{"last_known_affected_version_range":"<= 0.2.0","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-c42q-qvc3-j6vg/GHSA-c42q-qvc3-j6vg.json"},"modified":"2026-10-09T21:15:04.363433366Z","origins":[{"source":"ghsa","sourceId":"GHSA-c42q-qvc3-j6vg","modified":"2026-10-09T21:15:04.363433366Z","url":"https://osv.dev/vulnerability/GHSA-c42q-qvc3-j6vg"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}