VDB
Sign up

package

npm/@tiptap/core

pkg:npm/%40tiptap/core

MEDIUMnpm
GHSA-cp6q-959q-f8rh

Tiptap: mergeAttributes() turns an own __proto__ key into inherited executable DOM attributes

Modified: 9/2/2026

HIGHnpm
GHSA-j95f-988m-3j2f

Tiptap: Quadratic ReDoS in block and inline Markdown attribute parsing

Modified: 9/8/2026