4.8
Medium
CVE-2021-23346 This affects the package html-parse-stringify before 2.0.1; all versions of package html-parse-stringify2
Description
This affects the package html-parse-stringify before 2.0.1; all versions of package html-parse-stringify2. Sending certain input could cause one of the regular expressions that is used for parsing to backtrack, freezing the process.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| html-parse-stringify 2.0 | earliest → < 2.0.1 | 2.0.1 |
| html-parse-stringify2 | Versions not published |