tiptap/extension-link vulnerabilities

CVEs whose affected-version data names the tiptap/extension-link package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-14284Medium· 6.1

10mo ago

Versions of the package @tiptap/extension-link before 2.10.4 are vulnerable to Cross-site Scripting (XSS) due to unsanitized user input allowed in setting or toggling links

Versions of the package @tiptap/extension-link before 2.10.4 are vulnerable to Cross-site Scripting (XSS) due to unsanitized user input allowed in setting or toggling links. An attacker can execute arbitrary JavaScript code in the contex…

▾ Sunlittiptap · tiptap/extension-linkEPSS 0.37%via NVD