| Package | Affected versions | Patched versions |
|---|---|---|
| html-parse-stringify | < 2.0.1 | 2.0.1 |
| html-parse-stringify | < 2.0.1 | 2.0.1 |
| html-parse-stringify2 | ≤ 2.0.1 |
This affects the package html-parse-stringify before 2.0.1; all versions of package html-parse-stringify2. Sending certain input could cause one of the regular expressions that is used for parsing to backtrack, freezing the process.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free