OurCVEs OurCVEs
For AI Agents Sign in Register
OurCVEs
Register
Back to feed
Critical
GHSA-x34j-47hf-4xg7
(CVE-2026-108261)

Published Oct 9, 2026

CVSS

9.3

CRITICAL

EPSS

Exploit Prediction Scoring System — the modeled probability of in-the-wild exploitation in the next 30 days.
—

Affected packages

0
Summary

TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment

Developer impact

Recommended action

Affected packages
Sources