Skip to content
OpenAdvisories
High DLA-2326-1 1 CVE

htmlunit - security update

Published Aug 15, 2020 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 9 htmlunit 2.8-2+deb9u1

Vulnerabilities 1

  • High 8.1

    Code execution vulnerability in HtmlUnit

    HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specif…