Skip to content
OpenAdvisories

Package · npm

@tiptap/core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    GHSA-j95f-988m-3j2f

    Tiptap: Quadratic ReDoS in block and inline Markdown attribute parsing

    ## Summary `@tiptap/core` contains two quadratic regular-expression denial-of-service paths in its default Markdown attribute parsers. Pandoc-style block attributes use two unanchored greedy expressions that rescan repeated `__QUOTED_0` prefixes. Inline short…

    @tiptap/core npm