Htacg

8 CVEs across 2 Htacg products. Browse Htacg vulnerabilities, severities, and proof-of-concept exploits.

Htacg products with known CVEs

ProductCVEs
Tidy6
Tidy-Html53
Htacg CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-6498Low3.32025-06-23A vulnerability classified as problematic has been found in HTACG tidy-html5 5.8.0. Affected is the function defaultAlloc of the file src/alloc.c. The manipula…
CVE-2025-6497Low3.32025-06-23A vulnerability was found in HTACG tidy-html5 5.8.0. It has been rated as problematic. This issue affects the function prvTidyParseNamespace of the file src/pa…
CVE-2025-6496Low3.32025-06-23A vulnerability was found in HTACG tidy-html5 5.8.0. It has been declared as problematic. This vulnerability affects the function InsertNodeAsParent of the fil…
CVE-2021-33391Critical9.82023-02-17An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode() function in gdoc.c.
CVE-2017-17497High7.52017-12-10In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault), because the currentNode varia…
CVE-2017-13692High7.52017-08-25In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault), as demonstrated by an invalid ISALNU…
CVE-2015-55232015-08-11The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving multiple whitespace…
CVE-2015-55222015-08-11Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors…