p PatchFirst

PatchFirst · Latest vulnerabilities

ueberdosis/tiptap-php vulnerabilities

Vulnerabilities published for ueberdosis/tiptap-php in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2026-47110

    High · CVSS 7.1EPSS 0.55%Fix available

    Tiptap for PHP < 2.1.1 DoS via Malformed href Attribute

    Tiptap for PHP before version 2.1.1 contains an input validation vulnerability that allows authenticated attackers to cause a denial of service by submitting Tiptap JSON with the attrs.href field set to an array instead of a string, causing an unhandled TypeError in the Link::isAllowedUri() function when passed to preg_match(). Attackers can persist malformed JSON records that permanently crash the server-side HTML rendering pipeline for all subsequent viewers of that record until the database entry is manually repaired.

    ueberdosis/tiptap-phpPHP
    • Update to 2.1.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →