CVE-2022-28366

Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction PI input that causes excessive heap memory consumption. In particular, this issue exists in HtmlUnit-Neko through 2.26, and is fixed in 2.27. This issue also exists in CyberNeko HTML through 1.9.22 also...

nekohtml资源管理错误漏洞

nekohtml is a simple HTML scanner and tag compensator. A resource management error vulnerability exists in nekohtml, which stems from the fact that "org.cyberneko.html" used by Nokogiri Rubygem throws a "java.lang. OutOfMemoryError" exception when parsing malformed HTML markup...