0.001 Low
EPSS
Percentile
41.2%
In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault), as demonstrated by an invalid ISALNUM argument.
bugzilla.redhat.com/show_bug.cgi?id=1485857