38 matches found
Uncontrolled recursion DoS in JustHTML() via deeply nested HTML
Summaryjusthtml through 1.9.1 allows denial of service via deeply nested HTML. During parsing, JustHTML.init always reaches TreeBuilder.finish, which unconditionally calls populateselectedcontent. That function recursively traverses the DOM via findelements / findelement without a depth bound,...
8.7CVSS5.8AI score0.00488EPSS
SaveExploits0References7Affected Software1
20