4.8
Moyenne
CVE-2021-23346 This affects the package html-parse-stringify before 2.0.1; all versions of package html-parse-stringify2
Description
This affects the package html-parse-stringify before 2.0.1; all versions of package html-parse-stringify2. Sending certain input could cause one of the regular expressions that is used for parsing to backtrack, freezing the process.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| html-parse-stringify 2.0 | premières → < 2.0.1 | 2.0.1 |
| html-parse-stringify2 | Versions non publiées |