CVE-2025-6498: Htacg Tidy

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability classified as problematic has been found in HTACG tidy-html5 5.8.0. Affected is the function defaultAlloc of the file src/alloc.c. The manipulation leads to memory leak. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

Affected products

• Htacg Tidy: version 5.8.0 only

Published 2025-06-23. Last modified 2026-06-17.