CyberRota Analysis
AI-GeneratedThe incremental HTML parser is vulnerable to a denial-of-service attack due to its inability to handle repeated unterminated markup declarations in uncontrolled data, potentially leading to excessive CPU consumption. Organizations utilizing this parser in their applications should prioritize remediation efforts to mitigate the risk of service disruption. This vulnerability poses a significant threat, particularly for web applications that process untrusted HTML input.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data.
Related CVEs
Other vulnerabilities affecting the same vendor(s)