@tinacms next-tinacms-azure

• CVE-2026-63506 High 8.8 Tina: [Broken Access Control] letting any TinaCloud user authorize against any self-hosted site 0.5%
• CVE-2026-59992 Medium 5.4 Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters) 0.4%