npm/@tiptap/core: high
Tiptap: Quadratic ReDoS in block and inline Markdown attribute parsing
Action: Upgrade @tiptap/core to 3.30.5 or later.
npm i @tiptap/core@3.30.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.7.0 | 3.30.5 | - |
Fixed versions
| 3.30.5 |
Sources
- osv: GHSA-j95f-988m-3j2f
- https://github.com/ueberdosis/tiptap/security/advisories/GHSA-j95f-988m-3j2f
- https://github.com/ueberdosis/tiptap/commit/d0d499be3cce633cf54ca9aa9f3d8a5a1f98bd74
- https://github.com/ueberdosis/tiptap
- https://github.com/ueberdosis/tiptap/releases/tag/v3.30.5
published · modified · JSON