Skip to content
OpenAdvisories

Package · Maven

net.sourceforge.htmlunit:neko-htmlunit

2 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5

    OutOfMemory Exception by specifically crafted processing instruction in NekoHtml Parser

    HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability. Crafted input associated with the parsing of Processing Instruction (PI) data leads to heap memory consumption. This is similar to CVE-2022-28366 but affects a much later v…

  • High 7.5

    Denial of service in HtmlUnit-Neko

    Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes excessive heap memory consumption. In particular, this issue exists in HtmlUnit-Neko through 2.26, and is fixed in 2.27. This issue also exis…