PT-2025-25656
CVE-2025-6069
·
Published
2025-06-17
·
Updated
2026-07-31
Description by
CVSS 3.1
9.4
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Name of the Vulnerable Software and Affected Versions
Python (affected versions not specified)
Description
The
html.parser.HTMLParser class contains a flaw where processing certain crafted malformed inputs results in worst-case quadratic complexity. This occurs due to the use of a regular expression with inefficient computational complexity, which can lead to CPU exhaustion and an amplified denial-of-service.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾