net.sourceforge.htmlunit:neko-htmlunit (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package net.sourceforge.htmlunit:neko-htmlunit, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2022-28366 — CVSS 7.5 (high): Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes excessive heap memory…
• CVE-2022-29546 — CVSS 7.5 (high): HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability. Crafted input associated with the parsing of…