Lucene search

K
osvGoogleOSV:RUSTSEC-2019-0001
HistoryApr 27, 2019 - 12:00 p.m.

Uncontrolled recursion leads to abort in HTML serialization

2019-04-2712:00:00
Google
osv.dev
9

0.001 Low

EPSS

Percentile

42.5%

Affected versions of this crate did use recursion for serialization of HTML
DOM trees.

This allows an attacker to cause abort due to stack overflow by providing
a pathologically nested input.

The flaw was corrected by serializing the DOM tree iteratively instead.

CPENameOperatorVersion
ammonialt2.1.0

0.001 Low

EPSS

Percentile

42.5%