Skip to content
OpenAdvisories

Package · npm

html-parse-stringify2

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 4.8
    CVE-2021-23346

    Regular Expression Denial of Service (ReDoS)

    This affects the package html-parse-stringify before 2.0.1; all versions of package html-parse-stringify2. Sending certain input could cause one of the regular expressions that is used for parsing to backtrack, freezing the process.

    html-parse-stringify2 html-parse-stringify npm