html-stripscripts vulnerabilities and fixes
Recent CVEs affecting html-stripscripts, with upgrade or downgrade steps. 1 tracked.
Also searched as: html stripscripts.
html-stripscripts has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2023-01-21. Highest priority: CVE-2023-24038 (score 58/100).
- CVE-2023-24038 HIGH 7.5 UPGRADE MITIGATE The HTML-StripScripts module through 1.06 for Perl allows _hss_attval_style ReDoS because of catastrophic back
FAQ
How do I fix html-stripscripts vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is html-stripscripts being exploited right now?
None of the tracked html-stripscripts CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which html-stripscripts CVE should I patch first?
CVE-2023-24038 currently ranks highest (58/100): The HTML-StripScripts module through 1.06 for Perl allows _hss_attval_style ReDoS because of catastrophic back.