By weakness (CWE)

CWE-241: related vulnerabilities

CVEs classified under CWE-241. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

• CVE-2026-47110MEDIUM 6.5

  Tiptap for PHP versions before 2.1.1 have a flaw that allows logged-in users to deliberately crash the server's ability to render HTML content. An attacker submits a specially crafted Tiptap JSON document where a link URL field is set to an array of values instead of a single text string. When the server tries to validate this field using a string-matching function, it crashes with an unhandled error. Once this malformed data is saved to the database, every user who tries to view that record will trigger the same crash, disrupting service until a database administrator manually fixes the entry.