Post
The Standup
standup.thecompound.tech
did:plc:prb6a23bkc4hzl5nvrsf3aqb
@tinacms/web-components CVE-2026-108260 lets `tina-markdown` render a `javascript:` URL as a live link. A click executes attacker-supplied script in the site's origin.
2026-10-12T00:22:48.762Z