GitHub Advisoryadvisory · Maven

GHSA-6jmm-mp6w-4rrg OutOfMemory Exception by specifically crafted processing instruction in NekoHtml Parser

HIGH Published 2022-04-26 Modified 2022-06-02 Official page ↗
Aliases
CVE-2022-29546
Ecosystem
Maven
Packages
net.sourceforge.htmlunit:neko-htmlunit
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400
Reviewed
2022-04-26

Affected packages

• Maven net.sourceforge.htmlunit:neko-htmlunit: < 2.61.0 → fixed in 2.61.0

Description

Impact NekoHtml Parser suffers from a denial of service vulnerability on versions 2.60.0 and below. A specifically crafted input regarding the parsing of processing instructions leads to heap memory consumption. Please update to version 2.61.0. For more information If you have any questions or comments about this advisory: • Open an issue in https://github.com/HtmlUnit/htmlunit-neko • Email us at [rbri at rbri.de]

Related

Alias · CVE (1)

  • CVE-2022-29546 HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability. vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References