{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.0.1"}],"component":"html-parse-stringify2","cve_ids":["CVE-2021-23346"],"ecosystem":"npm","epss":0.02129,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-545q-3fg6-48m7","id":"tcs_01M5KF2FQBNWF6PDVSFPWKRX2P","modified_at":"2025-01-14T08:56:53.391305Z","published_at":"2021-03-18T19:39:31Z","references":["https://osv.dev/vulnerability/GHSA-545q-3fg6-48m7","https://nvd.nist.gov/vuln/detail/CVE-2021-23346","https://github.com/HenrikJoreteg/html-parse-stringify/commit/c7274a48e59c92b2b7e906fedf9065159e73fe12","https://github.com/HenrikJoreteg/html-parse-stringify/blob/master/lib/parse.js%23L2","https://github.com/HenrikJoreteg/html-parse-stringify/releases/tag/v2.0.1","https://github.com/rayd/html-parse-stringify2/blob/master/lib/parse.js%23L2","https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1080633","https://snyk.io/vuln/SNYK-JS-HTMLPARSESTRINGIFY-1079306","https://snyk.io/vuln/SNYK-JS-HTMLPARSESTRINGIFY2-1079307"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-545q-3fg6-48m7#npm/html-parse-stringify2","url":"https://osv.dev/vulnerability/GHSA-545q-3fg6-48m7"}],"summary":"html-parse-stringify and html-parse-stringify2 vulnerable to Regular expression denial of service (ReDoS)"}