cbcvebase.

Marshmallow-Packages Nova-Tiptap vulnerabilities

1 known vulnerability affecting marshmallow-packages/nova-tiptap.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2025-54082P2HIGHCVSS 8.1fixed in 5.7.02025-07-21
CVE-2025-54082 [HIGH] CWE-434 CVE-2025-54082: marshmallow-packages/nova-tiptap is a rich text editor for Laravel Nova based on tiptap. Prior to 5. marshmallow-packages/nova-tiptap is a rich text editor for Laravel Nova based on tiptap. Prior to 5.7.0, a vulnerability was discovered in the marshmallow-packages/nova-tiptap Laravel Nova package that allows unauthenticated users to upload arbitrary files to any Laravel disk configured in the application. The vulnerability is due to missing authentic
nvd
Marshmallow-Packages Nova-Tiptap vulnerabilities | cvebase