Approved changes feed: RSS · Atom
cpe:2.3:a:htacg:tidy:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Htacg (7a599353-2a09-534c-8b7e-5314d6291c07) |
|---|---|
| Product | Tidy (a4e08053-a68a-5615-b82d-ce1c32ba07ee) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/tidy-html5 |
purl2cpe | 2026-06-01 10:13:42.312955 |
pkg:deb/ubuntu/tidy-html5 |
purl2cpe | 2026-06-01 10:13:42.312959 |
pkg:github/htacg/tidy-html5 |
purl2cpe | 2026-06-01 10:13:42.312963 |
pkg:rpm/fedora/tidy |
purl2cpe | 2026-06-01 10:13:42.312967 |
pkg:rpm/opensuse/tidy |
purl2cpe | 2026-06-01 10:13:42.312970 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-5523 |
vulnerable | 2026-06-08 05:06:50.342496 |
Details available
The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace characters before an empty href, which triggers a large memory allocation.
Published: 2015-08-11T14:00:00.000Z
Updated: 2024-08-06T06:50:02.823Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5522 |
vulnerable | 2026-06-08 05:06:50.341515 |
Details available
Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving a command character in an href.
Published: 2015-08-11T14:00:00.000Z
Updated: 2024-08-06T06:50:02.662Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.