CVE-2023-4241: lol-html panics on certain HTML inputs
Impact lol-html can cause panics on certain HTML inputs. Anyone processing arbitrary 3rd party HTML with the library is affected.
Patches The problem has been patched and released as v1.1.1
Workarounds No workarounds exist.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-4241?
The severity of CVE-2023-4241 is high with a severity value of 7.5.
How does CVE-2023-4241 impact users?
CVE-2023-4241 can cause panics on certain HTML inputs, affecting anyone processing arbitrary 3rd party HTML with the lol-html library.
Has CVE-2023-4241 been patched?
Yes, CVE-2023-4241 has been patched and released as v1.1.1 of the lol-html library.
Are there any workarounds for CVE-2023-4241?
No, there are no workarounds for CVE-2023-4241.
Where can I find more information about CVE-2023-4241?
You can find more information about CVE-2023-4241 on the following references: [GitHub Advisory](https://github.com/cloudflare/lol-html/security/advisories/GHSA-c3x7-354f-4p2x), [NVD](https://nvd.nist.gov/vuln/detail/CVE-2023-4241), [GitHub Advisory (GHSA-c3x7-354f-4p2x)](https://github.com/advisories/GHSA-c3x7-354f-4p2x).