{"action":"Upgrade lol-html to 1.1.1 or later.","affected":[{"fixed":"1.1.1","introduced":"0"}],"component":"lol-html","cve_ids":["CVE-2023-4241"],"ecosystem":"crates.io","epss":0.00687,"exploited":false,"fixed_versions":["1.1.1"],"ghsa_id":"GHSA-c3x7-354f-4p2x","id":"tcs_01M5KEWPH14E6W4VGJCK8JKBQX","modified_at":"2026-07-08T06:52:55.828055732Z","published_at":"2023-08-09T13:17:53Z","references":["https://osv.dev/vulnerability/GHSA-c3x7-354f-4p2x","https://github.com/cloudflare/lol-html/security/advisories/GHSA-c3x7-354f-4p2x","https://nvd.nist.gov/vuln/detail/CVE-2023-4241","https://github.com/cloudflare/lol-html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-c3x7-354f-4p2x","url":"https://osv.dev/vulnerability/GHSA-c3x7-354f-4p2x"}],"summary":"lol-html panics on certain HTML inputs"}