GitHub Advisoryadvisory · crates.io

GHSA-c3x7-354f-4p2x lol-html panics on certain HTML inputs

HIGH Published 2023-08-09 Modified 2023-08-09 Official page ↗
Aliases
CVE-2023-4241
Ecosystem
crates.io
Packages
lol-html
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-20
Reviewed
2023-08-09

Affected packages

• crates.io lol-html: < 1.1.1 → fixed in 1.1.1

Description

Impact lol-html can cause panics on certain HTML inputs. Anyone processing arbitrary 3rd party HTML with the library is affected. Patches The problem has been patched and released as v1.1.1 Workarounds No workarounds exist.

Related

Alias · CVE (1)

  • CVE-2023-4241 lol-html can cause panics on certain HTML inputs. vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References