0.001 Low
EPSS
Percentile
41.2%
In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault), as demonstrated by an invalid ISALNUM argument.
www.securityfocus.com/bid/100506
github.com/htacg/tidy-html5/issues/588