{"affected":[{"product":"n/a","source":"CNA: mitre","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]},{"defaultStatus":"unaffected","ecosystem":"Maven","packageName":"net.sourceforge.htmlunit:neko-htmlunit","product":"net.sourceforge.htmlunit:neko-htmlunit","source":"OSV GHSA-6jmm-mp6w-4rrg","vendor":"","versions":[{"status":"affected","version":"2.21","versionType":"Maven"},{"status":"affected","version":"2.23","versionType":"Maven"},{"status":"affected","version":"2.24","versionType":"Maven"},{"status":"affected","version":"2.25","versionType":"Maven"},{"status":"affected","version":"2.27","versionType":"Maven"},{"status":"affected","version":"2.28","versionType":"Maven"},{"status":"affected","version":"2.30","versionType":"Maven"},{"status":"affected","version":"2.31","versionType":"Maven"},{"status":"affected","version":"2.32","versionType":"Maven"},{"status":"affected","version":"2.33","versionType":"Maven"},{"status":"affected","version":"2.34.0","versionType":"Maven"},{"status":"affected","version":"2.35.0","versionType":"Maven"},{"status":"affected","version":"2.36.0","versionType":"Maven"},{"status":"affected","version":"2.37.0","versionType":"Maven"},{"status":"affected","version":"2.38.0","versionType":"Maven"},{"status":"affected","version":"2.39.0","versionType":"Maven"},{"status":"affected","version":"2.40.0","versionType":"Maven"},{"status":"affected","version":"2.41.0","versionType":"Maven"},{"status":"affected","version":"2.42.0","versionType":"Maven"},{"status":"affected","version":"2.43.0","versionType":"Maven"},{"status":"affected","version":"2.44.0","versionType":"Maven"},{"status":"affected","version":"2.45.0","versionType":"Maven"},{"status":"affected","version":"2.46.0","versionType":"Maven"},{"status":"affected","version":"2.47.0","versionType":"Maven"},{"status":"affected","version":"2.47.1","versionType":"Maven"},{"status":"affected","version":"2.48.0","versionType":"Maven"},{"status":"affected","version":"2.49.0","versionType":"Maven"},{"status":"affected","version":"2.50.0","versionType":"Maven"},{"status":"affected","version":"2.51.0","versionType":"Maven"},{"status":"affected","version":"2.52.0","versionType":"Maven"},{"status":"affected","version":"2.53.0","versionType":"Maven"},{"status":"affected","version":"2.54.0","versionType":"Maven"},{"status":"affected","version":"2.55.0","versionType":"Maven"},{"status":"affected","version":"2.56.0","versionType":"Maven"},{"status":"affected","version":"2.57.0","versionType":"Maven"},{"status":"affected","version":"2.58.0","versionType":"Maven"},{"status":"affected","version":"2.59.0","versionType":"Maven"},{"status":"affected","version":"2.60.0","versionType":"Maven"},{"events":[{"introduced":"0"},{"fixed":"2.61.0"}],"status":"unknown","version":"0","versionType":"ECOSYSTEM"}]}],"cpeConfigurations":[{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:htmlunit:htmlunit:*:*:*:*:*:*:*:*","versionEndExcluding":"2.61.0","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"cveId":"CVE-2022-29546","cwes":[],"description":"HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability. Crafted input associated with the parsing of Processing Instruction (PI) data leads to heap memory consumption. This is similar to CVE-2022-28366 but affects a much later version of the product.","epss":{"date":"2026-11-02","percentile":0.68966,"score":0.01231},"exploits":[],"kev":null,"metrics":[{"score":7.5,"severity":"high","source":"NVD: nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},{"score":5,"severity":"medium","source":"NVD: nvd@nist.gov","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","version":"2.0"}],"modifiedAt":1793657833707,"publishedAt":1650855299000,"references":[{"source":"CNA: mitre","tags":["x_refsource_CONFIRM"],"url":"https://github.com/HtmlUnit/htmlunit-neko/security/advisories/GHSA-6jmm-mp6w-4rrg"},{"source":"ADP: CVE","tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://github.com/HtmlUnit/htmlunit-neko/security/advisories/GHSA-6jmm-mp6w-4rrg"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"https://github.com/HtmlUnit/htmlunit-neko/security/advisories/GHSA-6jmm-mp6w-4rrg"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://github.com/HtmlUnit/htmlunit-neko/security/advisories/GHSA-6jmm-mp6w-4rrg"},{"source":"OSV / GitHub Security Advisories","tags":["advisory"],"url":"https://github.com/advisories/GHSA-6jmm-mp6w-4rrg"},{"source":"OSV / GitHub Security Advisories","tags":["osv"],"url":"https://osv.dev/vulnerability/GHSA-6jmm-mp6w-4rrg"}],"remediation":[{"kind":"fix","source":"OSV GHSA-6jmm-mp6w-4rrg","text":"net.sourceforge.htmlunit:neko-htmlunit (Maven): OSV reports a fixed version 2.61.0. Check the advisory for supported release branches.","url":"https://github.com/advisories/GHSA-6jmm-mp6w-4rrg"}],"revision":"edc7aa525f3a0aa7c5033d1f30c951bd94a87309c51e02e50e0a27888770607d","sources":[{"modifiedAt":1793657054906,"name":"CNA: mitre","retrievedAt":1793660901671,"url":"https://www.cve.org/CVERecord?id=CVE-2022-29546"},{"modifiedAt":1793657833707,"name":"NVD","retrievedAt":1793665013499,"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29546"},{"modifiedAt":1783492149619,"name":"OSV / GitHub Security Advisories","retrievedAt":1793660902262,"url":"https://osv.dev/vulnerability/GHSA-6jmm-mp6w-4rrg"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793660909359,"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-29546"}],"ssvc":{"assessedAt":1793657037573,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"CVE-2022-29546","updatedAt":1793665013499}