Skip to content
Threat Feed
Subscribe

Product

TinaCMS CLI (<= 2.7.0)

1 brief RSS
high advisory

TinaCMS CLI Arbitrary Code Execution via Git Branch Name Injection

The TinaCMS CLI package fails to sanitize Git branch names during client code generation, allowing an attacker to inject and execute arbitrary JavaScript expressions within consumer build environments.

TinaCMS CLI supply-chain code-injection ci-cd rce
1t 1c