CVE-2026-47110

Medium

Description

Tiptap for PHP before version 2.1.1 contains an input validation vulnerability that allows authenticated attackers to cause a denial of service by submitting Tiptap JSON with the attrs.href field set to an array instead of a string, causing an unhandled TypeError in the Link::isAllowedUri() function when passed to preg_match(). Attackers can persist malformed JSON records that permanently crash the server-side HTML rendering pipeline for all subsequent viewers of that record until the database entry is manually repaired.

SeverityMedium

CVSS6.5

Exploit probability—

ProductUeberdosis/tiptap-php

PublishedJun 24, 2026

First seenJun 24, 2026

Weakness typeCWE-241CWE-241

How to fix

Update

ueberdosis/tiptap-php2.1.1 or later

Patches

github.com/ueberdosis/tiptap-php/commit/74bfb7be1c8c6102b240f3879b7f984a6ab87b97

Vendor advisories

github.com/ueberdosis/tiptap-php/releases/tag/2.1.1

Affected products

Product	Affected versions	Fixed in
ueberdosis/tiptap-phpPackagist	v < 2.1.1	2.1.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.