@tiptap/core vulnerabilities (npm)

2 vulnerabilities.

• @tiptap/core npm Tiptap: Quadratic ReDoS in block and inline Markdown attribute parsing GHSA-j95f-988m-3j2f Fix available 8.7 HighSeptember 8, 2026
• @tiptap/core npm Tiptap: mergeAttributes() turns an own __proto__ key into inherited executable DOM attributes GHSA-cp6q-959q-f8rh Fix available 6.4 MediumSeptember 2, 2026