CVE-2025-6069

The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs potentially leading to amplified denial-of-service.
Configurations

No configuration.

History

07 Jul 2025, 18:15

Type Values Removed Values Added
References
  • () https://github.com/python/cpython/commit/8d1b3dfa09135affbbf27fb8babcf3c11415df49 -
  • () https://github.com/python/cpython/commit/ab0893fd5c579d9cea30841680e6d35fc478afb5 -
  • () https://github.com/python/cpython/commit/f3c6f882cddc8dc30320d2e73edf019e201394fc -
  • () https://github.com/python/cpython/commit/fdc9d214c01cb4588f540cfa03726bbf2a33fc15 -
Summary
  • (es) La clase html.parser.HTMLParser tenía una complejidad cuadrática en el peor de los casos al procesar ciertas entradas mal formadas que podían llevar a una denegación de servicio amplificada.

17 Jun 2025, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-06-17 14:15

Updated : 2025-07-07 18:15


NVD link : CVE-2025-6069

Mitre link : CVE-2025-6069

CVE.ORG link : CVE-2025-6069


JSON object : View

Products Affected

No product.

CWE
CWE-1333

Inefficient Regular Expression Complexity