CVE-2021-23346: Html-Parse-Stringify Project Html-Parse-Stringify

Medium severity, CVSS 5.3. EPSS: 2.1% chance of exploitation in the next 30 days.

This affects the package html-parse-stringify before 2.0.1; all versions of package html-parse-stringify2. Sending certain input could cause one of the regular expressions that is used for parsing to backtrack, freezing the process.

Affected products

• Html-Parse-Stringify Project Html-Parse-Stringify: before 2.0.1 (fixed in 2.0.1)

Published 2021-03-04. Last modified 2026-06-17.