https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 08:16:24 +0000 https://cve.radiocsirt.org/vuln/cve-2023-25164 <p><strong>Affected:</strong> tinacms</p> <p>Tinacms is a Git-backed headless content management system with support for visual editing. Sites being built with @tinacms/cli &gt;= 1.0.0 &amp;&amp; &lt; 1.0.9 which store sensitive values in the process.env variable are impacted. These values will be added in plaintext to the index.js file. If you&#39;re on a version prior to 1.0.0 this vulnerability does not affect you. If you are affected and your Tina-enabled website has sensitive credentials stored as environment variables (eg. Algolia API keys) you should rotate those keys immediately. This issue has been patched in @tinacms/cli@1.0.9. Users are advised to upgrade. There are no known workarounds for this issue.</p> <p><strong>Affected:</strong> tinacms</p> <p>Tinacms is a Git-backed headless content management system with support for visual editing. Sites being built with @tinacms/cli &gt;= 1.0.0 &amp;&amp; &lt; 1.0.9 which store sensitive values in the process.env variable are impacted. These values will be added in plaintext to the index.js file. If you&#39;re on a version prior to 1.0.0 this vulnerability does not affect you. If you are affected and your Tina-enabled website has sensitive credentials stored as environment variables (eg. Algolia API keys) you should rotate those keys immediately. This issue has been patched in @tinacms/cli@1.0.9. Users are advised to upgrade. There are no known workarounds for this issue.</p> https://cve.radiocsirt.org/vuln/cve-2023-25164