CVE-2017-17497: Htacg Tidy

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault), because the currentNode variable in the "children of the head" processing feature is modified in the loop without validating the new value.

Affected products

• Htacg Tidy: version 5.7.0 only

Published 2017-12-10. Last modified 2026-06-17.