tidy-html5:tidy_general_fuzzer: Crash in tidy_general_fuzzer

Project: https://github.com/htacg/tidy-html5.git Detailed Report: https://oss-fuzz.com/testcase?key=5244629235335168 Project: tidy-html5 Fuzzing Engine: libFuzzer Fuzz Target: tidygeneralfuzzer Job Type: libfuzzerubsantidy-html5 Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

tidy-html5:tidy_config_fuzzer: Null-dereference READ in ubsan_GetStackTrace

Detailed Report: https://oss-fuzz.com/testcase?key=5259059310428160 Project: tidy-html5 Fuzzing Engine: libFuzzer Fuzz Target: tidyconfigfuzzer Job Type: libfuzzerubsantidy-html5 Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: ubsanGetStackTrace...

tidy-html5:tidy_general_fuzzer: Crash in tidy_general_fuzzer

Project: https://github.com/htacg/tidy-html5.git Detailed Report: https://oss-fuzz.com/testcase?key=6410685517725696 Project: tidy-html5 Fuzzing Engine: libFuzzer Fuzz Target: tidygeneralfuzzer Job Type: libfuzzerubsantidy-html5 Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

tidy-html5:tidy_general_fuzzer: Heap-use-after-free in CleanTree

Detailed Report: https://oss-fuzz.com/testcase?key=6411373809827840 Project: tidy-html5 Fuzzing Engine: libFuzzer Fuzz Target: tidygeneralfuzzer Job Type: libfuzzerasantidy-html5 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x7572498e1020 Crash State: CleanTree CleanTr...

tidy-html5:tidy_general_fuzzer: Heap-use-after-free in prvTidyCleanGoogleDocument

Detailed Report: https://oss-fuzz.com/testcase?key=4761751731372032 Project: tidy-html5 Fuzzing Engine: libFuzzer Fuzz Target: tidygeneralfuzzer Job Type: libfuzzerasantidy-html5 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x76e7f3ae03e8 Crash State:...

tidy-html5:tidy_general_fuzzer: Heap-use-after-free in prvTidyPPrintXMLTree

Detailed Report: https://oss-fuzz.com/testcase?key=6129312603635712 Project: tidy-html5 Fuzzing Engine: libFuzzer Fuzz Target: tidygeneralfuzzer Job Type: libfuzzerasantidy-html5 Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x7c6ec08e0aa8 Crash State:...

tidy-html5:tidy_config_fuzzer: Crash in __strstr_sse2_unaligned

Detailed Report: https://oss-fuzz.com/testcase?key=6120652720635904 Project: tidy-html5 Fuzzing Engine: libFuzzer Fuzz Target: tidyconfigfuzzer Job Type: libfuzzerubsantidy-html5 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x2254544c415f Crash State: strstrsse2unaligned strstr...

EUVD-2025-18860

Malicious code in bioql PyPI...

EUVD-2025-18861

Malicious code in bioql PyPI...

EUVD-2025-18857

Malicious code in bioql PyPI...

HTACG tidy-html5 parser.c prvTidyParseNamespace assertion

...

HTACG tidy-html5 alloc.c defaultAlloc memory leak

...

Linux Distros Unpatched Vulnerability : CVE-2025-6497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in HTACG tidy-html5 5.8.0. It has been rated as problematic. This issue affects the function prvTidyParseNamespace of the file...

Linux Distros Unpatched Vulnerability : CVE-2025-6496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in HTACG tidy-html5 5.8.0. It has been declared as problematic. This vulnerability affects the function InsertNodeAsParent of the file...

tidy-html5:tidy_fuzzer: Crash in tidy_fuzzer

Detailed Report: https://oss-fuzz.com/testcase?key=5344505235832832 Project: tidy-html5 Fuzzing Engine: libFuzzer Fuzz Target: tidyfuzzer Job Type: libfuzzerubsantidy-html5 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x212d21222220 Crash State: tidyfuzzer Sanitizer: undefined UBSAN...

CVE-2025-6498

A vulnerability classified as problematic has been found in HTACG tidy-html5 5.8.0. Affected is the function defaultAlloc of the file src/alloc.c. The manipulation leads to memory leak. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be...

CVE-2025-6496

A vulnerability was found in HTACG tidy-html5 5.8.0. It has been declared as problematic. This vulnerability affects the function InsertNodeAsParent of the file src/parser.c. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been...

CVE-2025-6497

A vulnerability was found in HTACG tidy-html5 5.8.0. It has been rated as problematic. This issue affects the function prvTidyParseNamespace of the file src/parser.c. The manipulation leads to reachable assertion. Attacking locally is a requirement. The exploit has been disclosed to the public an...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime via the defaultAlloc function. An attacker can cause resource exhaustion by repeatedly triggering memory allocations without proper deallocation. Remediation There is no fixed version f...

AZL-64314 CVE-2025-6498 affecting package tidy 5.8.0-6

A vulnerability classified as problematic has been found in HTACG tidy-html5 5.8.0. Affected is the function defaultAlloc of the file src/alloc.c. The manipulation leads to memory leak. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be...