CVE-2025-14284
1 advisory.
npm/@tiptap/extension-link CVE-2025-14284: medium 6.1, EPSS 0.37%
@tiptap/extension-link vulnerable to Cross-site Scripting (XSS)
Action: Upgrade @tiptap/extension-link to 2.10.4 or later.
npm i @tiptap/extension-link@2.10.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.10.4 | - |
Fixed versions
| 2.10.4 |
Sources
- osv: GHSA-vhrc-hgrq-x75r
- https://nvd.nist.gov/vuln/detail/CVE-2025-14284
- https://github.com/ueberdosis/tiptap/commit/1c2fefe3d61ab1c8fbaa6d6b597251e1b6d9aaed
- https://gist.github.com/th4s1s/3d1b6cd3e7257b14947242f712ec6e1f
- https://github.com/ueberdosis/tiptap
- https://github.com/ueberdosis/tiptap/releases/tag/v2.10.4
- https://security.snyk.io/vuln/SNYK-JS-TIPTAPEXTENSIONLINK-14222197
CVE-2025-14284 · published · modified · JSON