@tinacms next-tinacms-cloudinary

• CVE-2026-59992 Medium 5.4 Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters) 0.4%