Tina CMS
Git-backed content management with visual editing
Tina CMS is an open-source, Git-backed content management system that adds visual editing to web projects. Its self-hosted backend stores content in your repository and provides a live, in-context editing experience.
Key features
- Git-backed content
- Visual in-context editing
- GraphQL content API
- Markdown and JSON support
Pros & cons
Strengths
- Content lives in Git
- Visual editing for editors
- Works with static site frameworks
Trade-offs
- React-focused
- Self-hosting setup effort
Is Tina CMS secure?
No confirmed vulnerabilities affect Tina CMS's latest release ([email protected]). OSV.dev lists 20 advisories for the project and links 2 of them to this release, but their version data doesn't confirm them. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.
2 unconfirmed matches
OSV.dev links these advisories to this release, but their own version data doesn't confirm it: they cover a separately versioned sub-package of the repository, or record the fix only as a commit. They are listed for completeness and not counted in the health score.
Matched by OSV, not confirmed
| Advisory | Severity | Summary |
|---|---|---|
| CVE-2026-63506 | High | Tina: [Broken Access Control] letting any TinaCloud user authorize against any self-hosted site Fixed in 1.1.4, 15.0.1 |
| CVE-2026-59992 | Medium | Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters) Fixed in 23.0.4, 14.0.4, 26.0.4 |
- Most recent fixed advisory CVE-2026-108261, published 2026-10-09 (5 days ago), fixed in 3.14.0, 2.5.14
Source: OSV.dev, checked 2026-10-14. How this is measured.
Tina CMS replaces
Health badge
Maintain Tina CMS? Add its health score to your README. The badge links back to this page.
Compare Tina CMS
7 head-to-head comparisons.
Similar content management systems apps
Ghost
Content Management SystemsProfessional publishing platform for blogs and newsletters
Replaces WordPress, Substack
Payload CMS
Content Management SystemsTypeScript-native headless CMS and application framework
Replaces Contentful, Sanity
Docsify
Content Management SystemsDocumentation site generator
Replaces GitBook
WordPress
Content Management SystemsThe most popular content management system in the world
Replaces Wix, Squarespace
Wagtail
Content Management SystemsDeveloper-friendly Django CMS with a great editor experience
Replaces Adobe Experience Manager, WordPress
Grav
Content Management SystemsFast flat-file CMS with no database required
Replaces WordPress, Squarespace