[CRITICAL] nova-tiptap has Unauthenticated Arbitrary File Upload Vulnerability

PKSA-qsyh-t4s8-xwhq CVE-2025-54082 GHSA-96c2-h667-9fxp

Affected package: marshmallow/nova-tiptap

Affected version: <5.7.0

Reported by:
GitHub