{"schema":"vulnpedia.research/1","cve":"CVE-2026-108261","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/tinacms/tinacms/security/advisories/GHSA-x34j-47hf-4xg7","tags":["x_refsource_CONFIRM","exploit","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:43:37.580Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:43:37.580Z","url":"https://github.com/tinacms/tinacms/security/advisories/GHSA-x34j-47hf-4xg7"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-13T11:24:15.591Z","url":"https://github.com/tinacms/tinacms/security/advisories/GHSA-x34j-47hf-4xg7"},{"source":"nvd","sourceId":"CVE-2026-108261","modified":"2026-10-16T20:04:29.760","url":"https://github.com/tinacms/tinacms/security/advisories/GHSA-x34j-47hf-4xg7"},{"source":"ghsa","sourceId":"GHSA-x34j-47hf-4xg7","url":"https://github.com/tinacms/tinacms/security/advisories/GHSA-x34j-47hf-4xg7"},{"source":"ghsa","sourceId":"GHSA-x34j-47hf-4xg7","modified":"2026-10-09T21:15:05.360447760Z","url":"https://github.com/tinacms/tinacms/security/advisories/GHSA-x34j-47hf-4xg7"}]},{"url":"https://github.com/tinacms/tinacms/pull/7522","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:43:37.580Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:43:37.580Z","url":"https://github.com/tinacms/tinacms/pull/7522"},{"source":"nvd","sourceId":"CVE-2026-108261","modified":"2026-10-16T20:04:29.760","url":"https://github.com/tinacms/tinacms/pull/7522"},{"source":"ghsa","sourceId":"GHSA-x34j-47hf-4xg7","url":"https://github.com/tinacms/tinacms/pull/7522"},{"source":"ghsa","sourceId":"GHSA-x34j-47hf-4xg7","modified":"2026-10-09T21:15:05.360447760Z","url":"https://github.com/tinacms/tinacms/pull/7522"}]},{"url":"https://github.com/tinacms/tinacms/commit/b57dbf4b56201aef15cd92caa49fd12ab96bbecf","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:43:37.580Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:43:37.580Z","url":"https://github.com/tinacms/tinacms/commit/b57dbf4b56201aef15cd92caa49fd12ab96bbecf"},{"source":"nvd","sourceId":"CVE-2026-108261","modified":"2026-10-16T20:04:29.760","url":"https://github.com/tinacms/tinacms/commit/b57dbf4b56201aef15cd92caa49fd12ab96bbecf"},{"source":"ghsa","sourceId":"GHSA-x34j-47hf-4xg7","url":"https://github.com/tinacms/tinacms/commit/b57dbf4b56201aef15cd92caa49fd12ab96bbecf"},{"source":"ghsa","sourceId":"GHSA-x34j-47hf-4xg7","modified":"2026-10-09T21:15:05.360447760Z","url":"https://github.com/tinacms/tinacms/commit/b57dbf4b56201aef15cd92caa49fd12ab96bbecf"}]},{"url":"https://github.com/tinacms/tinacms/releases/tag/@tinacms/app@2.5.14","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:43:37.580Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:43:37.580Z","url":"https://github.com/tinacms/tinacms/releases/tag/@tinacms/app@2.5.14"},{"source":"nvd","sourceId":"CVE-2026-108261","modified":"2026-10-16T20:04:29.760","url":"https://github.com/tinacms/tinacms/releases/tag/@tinacms/app@2.5.14"},{"source":"ghsa","sourceId":"GHSA-x34j-47hf-4xg7","url":"https://github.com/tinacms/tinacms/releases/tag/@tinacms/app@2.5.14"},{"source":"ghsa","sourceId":"GHSA-x34j-47hf-4xg7","modified":"2026-10-09T21:15:05.360447760Z","url":"https://github.com/tinacms/tinacms/releases/tag/@tinacms/app@2.5.14"}]},{"url":"https://github.com/tinacms/tinacms/releases/tag/tinacms@3.14.0","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:43:37.580Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-09T20:43:37.580Z","url":"https://github.com/tinacms/tinacms/releases/tag/tinacms@3.14.0"},{"source":"nvd","sourceId":"CVE-2026-108261","modified":"2026-10-16T20:04:29.760","url":"https://github.com/tinacms/tinacms/releases/tag/tinacms@3.14.0"},{"source":"ghsa","sourceId":"GHSA-x34j-47hf-4xg7","url":"https://github.com/tinacms/tinacms/releases/tag/tinacms@3.14.0"},{"source":"ghsa","sourceId":"GHSA-x34j-47hf-4xg7","modified":"2026-10-09T21:15:05.360447760Z","url":"https://github.com/tinacms/tinacms/releases/tag/tinacms@3.14.0"}]},{"url":"https://osv.dev/vulnerability/GHSA-x34j-47hf-4xg7","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-x34j-47hf-4xg7","modified":"2026-10-09T21:15:05.360447760Z","origins":[{"source":"ghsa","sourceId":"GHSA-x34j-47hf-4xg7","url":"https://osv.dev/vulnerability/GHSA-x34j-47hf-4xg7"},{"source":"ghsa","sourceId":"GHSA-x34j-47hf-4xg7","modified":"2026-10-09T21:15:05.360447760Z","url":"https://osv.dev/vulnerability/GHSA-x34j-47hf-4xg7"}]},{"url":"https://github.com/tinacms/tinacms","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-x34j-47hf-4xg7","modified":"2026-10-09T21:15:05.360447760Z","origins":[{"source":"ghsa","sourceId":"GHSA-x34j-47hf-4xg7","url":"https://github.com/tinacms/tinacms"},{"source":"ghsa","sourceId":"GHSA-x34j-47hf-4xg7","modified":"2026-10-09T21:15:05.360447760Z","url":"https://github.com/tinacms/tinacms"}]},{"source":"euvd","sourceId":"EUVD-2026-95990","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95990","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-95990","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-95990"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-x34j-47hf-4xg7","url":"https://osv.dev/vulnerability/GHSA-x34j-47hf-4xg7","ecosystem":"npm","name":"tinacms","purl":"pkg:npm/tinacms","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.14.0"}]}],"databaseSpecific":{"last_known_affected_version_range":"<= 3.13.0","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-x34j-47hf-4xg7/GHSA-x34j-47hf-4xg7.json"},"modified":"2026-10-09T21:15:05.360447760Z","origins":[{"source":"ghsa","sourceId":"GHSA-x34j-47hf-4xg7","modified":"2026-10-09T21:15:05.360447760Z","url":"https://osv.dev/vulnerability/GHSA-x34j-47hf-4xg7"}]},{"source":"ghsa","sourceId":"GHSA-x34j-47hf-4xg7","url":"https://osv.dev/vulnerability/GHSA-x34j-47hf-4xg7","ecosystem":"npm","name":"@tinacms/app","purl":"pkg:npm/%40tinacms/app","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.5.14"}]}],"databaseSpecific":{"last_known_affected_version_range":"<= 2.5.13","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-x34j-47hf-4xg7/GHSA-x34j-47hf-4xg7.json"},"modified":"2026-10-09T21:15:05.360447760Z","origins":[{"source":"ghsa","sourceId":"GHSA-x34j-47hf-4xg7","modified":"2026-10-09T21:15:05.360447760Z","url":"https://osv.dev/vulnerability/GHSA-x34j-47hf-4xg7"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}