CVE-2021-33391: Htacg Tidy

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode() function in gdoc.c.

Affected products

• Htacg Tidy: version 5.7.28 only

Published 2023-02-17. Last modified 2026-06-17.