A vulnerability, which was classified as critical, was found in @tinacms graphql up to 2.1.1. This vulnerability affects the function
path.join. Executing a manipulation can lead to path traversal.
This vulnerability is handled as CVE-2026-24125. The attack can be executed remotely. There is not any exploit available.
You should upgrade the affected component.
