npm/@tiptap/core: medium
Tiptap: mergeAttributes() turns an own __proto__ key into inherited executable DOM attributes
Action: Upgrade @tiptap/core to 3.30.4 or later.
npm i @tiptap/core@3.30.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0-alpha.0 | 3.30.4 | - |
Fixed versions
| 3.30.4 |
Sources
- osv: GHSA-cp6q-959q-f8rh
- https://github.com/ueberdosis/tiptap/security/advisories/GHSA-cp6q-959q-f8rh
- https://github.com/ueberdosis/tiptap/commit/01d7af8c983ee5954c63734f4fa46cb23ae3246d
- https://github.com/ueberdosis/tiptap
- https://github.com/ueberdosis/tiptap/releases/tag/v3.30.4
published · modified · JSON