CVE-2023-4241

CVE-2023-4241 affects the lol-html library. The issue causes panics when processing certain HTML inputs from arbitrary third-party HTML. The public notes consistently describe a panic rather than a security failure like arbitrary code execution, and there is explicit guidance that patches exist. ...

CVE-2023-4241 lol-html panics on certain HTML inputs

lol-html can cause panics on certain HTML inputs. Anyone processing arbitrary 3rd party HTML with the library is affected...