Approved changes feed: RSS · Atom

cpe:2.3:a:htacg:tidy:5.7.0:*:*:*:*:*:*:*

part: a version: 5.7.0 update: *

VendorHtacg (7a599353-2a09-534c-8b7e-5314d6291c07)
ProductTidy (a4e08053-a68a-5615-b82d-ce1c32ba07ee)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/tidy-html5 purl2cpe 2026-06-01 10:13:42.313051
pkg:deb/ubuntu/tidy-html5 purl2cpe 2026-06-01 10:13:42.313053
pkg:github/htacg/tidy-html5 purl2cpe 2026-06-01 10:13:42.313055
pkg:rpm/fedora/tidy purl2cpe 2026-06-01 10:13:42.313057
pkg:rpm/opensuse/tidy purl2cpe 2026-06-01 10:13:42.313058

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-17497 vulnerable 2026-06-08 05:09:09.498832 Details available
In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault), because the currentNode variable in the "children of the head" processing feature is modified in the loop without validating the new value.
Published: 2017-12-10T22:00:00.000Z
Updated: 2024-08-05T20:51:31.608Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.