Tiptap

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Tiptap records in CISA KEV

No Tiptap vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Tiptap/extension-link 1 record MEDIUM

Records

1 record

TI-2025-13051 CVE-2025-14284 · GHSA-vhrc-hgrq-x75r

Cross-site scripting in @tiptap/extension-link

MEDIUM 56

Versions of the package @tiptap/extension-link before 2.10.4 are vulnerable to Cross-site Scripting (XSS) due to unsanitized user input allowed in setting or toggling links.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00368 Published 2025-12-09 Fixed in 2.10.4 CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0