CVE-2026-28791 — Tina is a headless content management system. Prior to 2.1.7, a path traversal vulnerability exists in the TinaCMS development server's media upload handler. The code at media.ts joins user-contro — CVE Database · The Intelligence Room