Description

The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data.

Remediation

References

CVE-2026-15308

Related Vulnerabilities

SharePoint CVE-2023-36762 Vulnerability (CVE-2023-36762)

Internet Information Services Other Vulnerability (CVE-2001-0334)

WordPress Plugin WPJobBoard Cross-Site Scripting (5.6.4)

SharePoint Use After Free Vulnerability (CVE-2025-62559)

WordPress Plugin Design Approval System Cross-Site Scripting (3.6)

Severity

High

Classification

CVE-2026-15308 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities