GCVE - cpe:2.3:a:htacg:tidy-html5:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:htacg:tidy-html5:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Htacg (`7a599353-2a09-534c-8b7e-5314d6291c07`)
Product	Tidy Html5 (`e7a8ab63-0e0e-5727-aa94-4faa8c6af0e3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-6498`	vulnerable	2026-06-08 07:43:15.167458	HTACG tidy-html5 alloc.c defaultAlloc memory leak LOW (3.3) A vulnerability classified as problematic has been found in HTACG tidy-html5 5.8.0. Affected is the function defaultAlloc of the file src/alloc.c. The manipulation leads to memory leak. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Published: 2025-06-23T01:31:05.868Z Updated: 2025-06-23T13:45:07.073Z Open on db.gcve.eu Reference links https://vuldb.com/?id.313614 https://vuldb.com/?ctiid.313614 https://vuldb.com/?submit.601009 https://github.com/htacg/tidy-html5/issues/1152 https://github.com/user-attachments/files/20438303/tidy-html5_crash_3.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6497`	vulnerable	2026-06-08 07:43:15.166980	HTACG tidy-html5 parser.c prvTidyParseNamespace assertion LOW (3.3) A vulnerability was found in HTACG tidy-html5 5.8.0. It has been rated as problematic. This issue affects the function prvTidyParseNamespace of the file src/parser.c. The manipulation leads to reachable assertion. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Published: 2025-06-23T00:31:07.356Z Updated: 2025-06-23T13:02:06.964Z Open on db.gcve.eu Reference links https://vuldb.com/?id.313613 https://vuldb.com/?ctiid.313613 https://vuldb.com/?submit.601008 https://github.com/htacg/tidy-html5/issues/1142 https://github.com/user-attachments/files/19825297/tidy-html5_crash_2.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6496`	vulnerable	2026-06-08 07:43:15.166463	HTACG tidy-html5 parser.c InsertNodeAsParent null pointer dereference LOW (3.3) A vulnerability was found in HTACG tidy-html5 5.8.0. It has been declared as problematic. This vulnerability affects the function InsertNodeAsParent of the file src/parser.c. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Published: 2025-06-23T00:00:15.786Z Updated: 2025-06-23T13:06:58.408Z Open on db.gcve.eu Reference links https://vuldb.com/?id.313612 https://vuldb.com/?ctiid.313612 https://vuldb.com/?submit.601007 https://github.com/htacg/tidy-html5/issues/1141 https://github.com/user-attachments/files/19652942/tidy-html5_crash.txt	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.