| Package | Affected versions | Patched versions |
|---|---|---|
| tidy | = 5.7.0 |
In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault), because the currentNode variable in the "children of the head" processing feature is modified in the loop without validating the new value.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free