CVE-2026-47110 Details
Description
Tiptap for PHP before version 2.1.1 contains an input validation vulnerability that allows authenticated attackers to cause a denial of service by submitting Tiptap JSON with the attrs.href field set to an array instead of a string, causing an unhandled TypeError in the Link::isAllowedUri() function when passed to preg_match(). Attackers can persist malformed JSON records that permanently crash the server-side HTML rendering pipeline for all subsequent viewers of that record until the database entry is manually repaired.
A denial-of-service vulnerability has been identified in Tiptap for PHP versions prior to 2.1.1. This issue arises from improper input validation, allowing authenticated attackers to submit Tiptap JSON with the attrs.href field incorrectly formatted as an array instead of a string. This misconfiguration leads to an unhandled TypeError in the Link::isAllowedUri() function when the data is processed with preg_match(). Attackers can exploit this vulnerability by persisting the malformed JSON, causing a permanent crash in the server-side HTML rendering pipeline for all users viewing that record, until the database entry is manually fixed.
Users can upgrade to Tiptap for PHP version 2.1.1 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jun 24, 2026CISA-ADP
Assessed Jun 30, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/ueberdosis/tiptap-php/commit/74bfb7be1c8c6102b240f3879b7f984a6ab87b97 | [email protected] | Source CodeVendor |
| https://github.com/ueberdosis/tiptap-php/pull/94 | [email protected] | Issue TrackingVendor |
| https://github.com/ueberdosis/tiptap-php/releases/tag/2.1.1 | [email protected] | Release NotesVendor |
| https://www.vulncheck.com/advisories/tiptap-for-php-dos-via-malformed-href-attribute | [email protected] | AdvisoryRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-241 | Improper Handling of Unexpected Data Type | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| ueberdosis Tiptap | < 2.1.1 (semver) |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 14, 2026 | CVE Modified | [email protected] |
| Jun 30, 2026 | CVE Modified | CISA-ADP |
| Jun 24, 2026 | New CVE Received | [email protected] |