← ターゲット選定に戻る

CMS

tinacms/tinacms

A fully open-source headless CMS that supports Markdown and Visual Editing

#cms#nextjs#react#content-management-system#tinacms#markdown#typescript#tina#forestry

スコア

80

/ 100

Star

13,334

Fork

700

Open Issue

365

サイズ

901MB

言語

TypeScript ★

最終push

1 日前

Docker

—

採点内訳

過去CVE 9件 (適量)

✓

直近 push: 1 日前

✓

得意言語 (TypeScript)

✓

オープンissue 365件

✓

超大規模 (0.9GB)

—

Docker 未対応

—

10k–50k: 中級 (★13,334)

—

※ 各項目の重みは「採点ルール」を参照。合計は 0 で底打ち。

過去の SecurityAdvisory (11 件)

HIGHGHSA-g9c2-gf25-3x67 CVE-2026-346042026/3/30
`FilesystemBridge` Path Validation Can Be Bypassed via Symlinks or Junctions
HIGHGHSA-g87c-r2jp-293w CVE-2026-346032026/3/30
Media Endpoints Can Escape the Media Root via Symlinks or Junctions
HIGHGHSA-v9p7-gf3q-h779 CVE-2026-339492026/3/30
Path Traversal Leads to overwrite of arbitrary files
CRITICALGHSA-8pw3-9m7f-q7342026/3/12
Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS
HIGHGHSA-2f24-mg4x-534q2026/3/12
Path Traversal Leading to Arbitrary File Read, Write and Delete in TinaCMS
MEDIUMGHSA-m48g-4wr2-j2h6 CVE-2026-290662026/3/12
Arbitrary File Read via Disabled Vite Filesystem Restriction in TinaCMS CLI
MEDIUMGHSA-2238-xc5r-v9hj CVE-2026-241252026/3/12
Path Traversal in @tinacms/graphql
HIGHGHSA-5hxf-c7j4-279c CVE-2026-287912026/3/12
Path Traversal in Media Upload Handle
CRITICALGHSA-529f-9qwm-9628 CVE-2025-682782025/12/18
Arbitrary frontmatter code execution in tinacms
HIGHGHSA-4qrm-9h4r-v2fx CVE-2024-453912024/9/3
Tina search token leak via lock file in TinaCMS
HIGHGHSA-pc2q-jcxq-rjrr CVE-2023-251642023/2/8
Sensitive Information leak via Script File in TinaCMS