VYPR

Nova Tiptap

by Marshmallow Packages

Source repositories

CVEs (1)

  • CVE-2025-54082HigJul 21, 2025
    risk 0.46cvss epss 0.01

    marshmallow-packages/nova-tiptap is a rich text editor for Laravel Nova based on tiptap. Prior to 5.7.0, a vulnerability was discovered in the marshmallow-packages/nova-tiptap Laravel Nova package that allows unauthenticated users to upload arbitrary files to any Laravel disk…