[aungzayyanaing]

Updates

• References

Comments
Add the official @tinacms/graphql 2.1.2 release reference. The release notes describe the GraphQL resolver path-traversal fix (PR #6368) and the advisory is fixed in 2.1.2. Reference-only change; no other advisory fields were changed.

[github]

Hi there @18-th! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[Copilot]

🟢 Approval recommended

The advisory records the official @tinacms/graphql 2.1.2 release reference while leaving its vulnerability and affected-version data unchanged.

No open issues 🎉

What changed in this PR

Adds the official @tinacms/graphql 2.1.2 release reference to the existing path-traversal advisory without changing its vulnerability or affected-version data.

Changes:

• Updates the advisory modification timestamp.
• Adds the GitHub release URL for @tinacms/[email protected].

File	Description
advisories/​github-reviewed/​2026/​03/​GHSA-2238-xc5r-v9hj/​GHSA-2238-xc5r-v9hj.json	Records the official fixed package release reference and updates the advisory metadata timestamp.

_{Review effort: Lite (dynamic)}