Marshmallow-packages vulnerabilities
We track 1 vulnerability in Marshmallow-packages products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 21, 2025.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Marshmallow-packages vulnerabilities
- 8.1 High severity
nova-tiptap: Unrestricted Upload of File with Dangerous Type
marshmallow-packages/nova-tiptap is a rich text editor for Laravel Nova based on tiptap. Prior to 5.7.0, a vulnerability was discovered in the marshmallow-packages/nova-tiptap Laravel Nova package that allows unauthenticated users to upload arbitrary files to