CVE-2024-45391
1 advisory.
npm/@tinacms/cli CVE-2024-45391: high 7.5, EPSS 0.31%
Tina search token leak via lock file in TinaCMS
Action: Upgrade @tinacms/cli to 1.6.2 or later.
npm i @tinacms/cli@1.6.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.2 | - |
Fixed versions
| 1.6.2 |
Sources
- osv: GHSA-4qrm-9h4r-v2fx
- https://github.com/tinacms/tinacms/security/advisories/GHSA-4qrm-9h4r-v2fx
- https://nvd.nist.gov/vuln/detail/CVE-2024-45391
- https://github.com/tinacms/tinacms/pull/4758
- https://github.com/tinacms/tinacms/commit/110f1ceea4574d636a64526648f7c8bf6539b26a
- https://github.com/tinacms/tinacms
CVE-2024-45391 · published · modified · JSON