Vulnerabilidades de Tiptap

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Tiptap: 1 registro(s), com severidade, exploração e correções.

Tiptap/extension-link 1

Somente exploradas (KEV) →

CVE-2025-14284 Média · 6.1 CWE-79 09/12/2025

@tiptap/extension-link vulnerable to Cross-site Scripting (XSS)

Versions of the package @tiptap/extension-link before 2.10.4 are vulnerable to Cross-site Scripting (XSS) due to unsanitized user input allowed in setting or toggling links. An attacker can execute arbitrary JavaScript code in the context of the application by injecting a javascript: URL payload into these attributes, which is then triggered either by user interaction.