{"id":"CVE-2023-4241","aliases":["GHSA-c3x7-354f-4p2x"],"title":"lol-html panics on certain HTML inputs","summary":"lol-html panics on certain HTML inputs","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","vendor":"lol-html","product":"lol-html","ecosystem":"rust","affected":["lol-html < 1.1.1"],"patched":["lol-html 1.1.1"],"published":"2023-08-09","updated":"2026-07-08","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-c3x7-354f-4p2x","references":[{"url":"https://github.com/cloudflare/lol-html/security/advisories/GHSA-c3x7-354f-4p2x"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4241"},{"url":"https://github.com/cloudflare/lol-html"}],"tags":["osv","rust"],"epss":0.00687,"epssPercentile":0.50862,"ingestedAt":"2026-07-09T18:56:37.297Z","slug":"CVE-2023-4241","body":"## Overview\n\n### Impact\nlol-html can cause panics on certain HTML inputs. Anyone processing arbitrary 3rd party HTML with the library is affected.\n\n### Patches\nThe problem has been patched and released as v1.1.1\n\n### Workarounds\nNo workarounds exist.\n\n\n## Affected packages\n\n- `lol-html < 1.1.1`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `lol-html 1.1.1`","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}