Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2024-45391

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-4qrm-9h4r-v2fx

Tina search token leak via lock file in TinaCMS ### Impact Tina search token leaked via lock file (tina-lock.json) in TinaCMS. Sites building with @tinacms/cli < 1.6.2 that use a search token are impacted. If your Tina-enabled website has search setup, you should rotate that key immediately. ### Patches This issue has been patched in @tinacms/cli@1.6.2 ### Workarounds Upgrading, and rotating search token is required for the proper fix. ### References https://github.com/tinacms/tinacms/pull/4758

gitlab/npm/@tinacms/cli/CVE-2024-45391

Tina search token leak via lock file in TinaCMS Tina search token leaked via lock file (tina-lock.json) in TinaCMS. Sites building with @tinacms/cli < 1.6.2 that use a search token are impacted. If your Tina-enabled website has search setup, you should rotate that key immediately.