VULNERABILITY INTELLIGENCE

CVE-2021-23346

CVSS score5.3 MEDIUM
EPSS probability2.13%
CISA KEVNot currently listed
Published2021-03-04
Last modified2026-06-17

Description

This affects the package html-parse-stringify before 2.0.1; all versions of package html-parse-stringify2. Sending certain input could cause one of the regular expressions that is used for parsing to backtrack, freezing the process.