CVE-2023-34623

A flaw was found in jtidy when parsing untrusted html. If the parser is running on unsanitized user input, an attacker could craft a request that causes the parser to crash by stack overflow, resulting in a denial of service (DoS).

Mitigation

This flaw can be mitigated by implementing sanitization against excessive nesting in user requests.