org.htmlunit.cyberneko.HTMLTagBalancer.endElement · Security Exception
Affects htmlunitSource GCVE Database
Rated Medium by Threat Radar's AI analysis
- Patch
- Available – fixed in 7ae58fa2368d0ab209e6af06e0ebbc9ab6e9c7f4
Data as of 27 Oct 2026, 02:06 UTC
What to do
Upgrade htmlunit to 7ae58fa2368d0ab209e6af06e0ebbc9ab6e9c7f4.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
OSS-Fuzzhtmlunitpkg:generic/htmlunitOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users of htmlunit versions 4.19.0, 4.20.0, and 4.21.0 should apply the available patch that fixes this vulnerability. The fixed version is identified by the commit 7ae58fa2368d0ab209e6af06e0ebbc9ab6e9c7f4. No alternative mitigations are indicated.
Description
A security exception vulnerability was reported in the org.htmlunit.cyberneko.HTMLTagBalancer.endElement method of the htmlunit library versions 4.19.0, 4.20.0, and 4.21.0. The issue was identified by OSS-Fuzz and involves a crash triggered by malformed HTML processing. A fix has been committed to address this vulnerability.