CVE-2025-45526

A denial of service (DoS) vulnerability has been identified in the JavaScript library microlight version 0.0.7. This library, used for syntax highlighting, does not limit the size of textual content it processes in HTML elements with the microlight class. When excessively large content (e.g., 100 million characters) is processed, the reset function in microlight.js consumes excessive memory and CPU resources, causing browser crashes or unresponsiveness. An attacker can exploit this vulnerability by tricking a user into visiting a malicious web page containing a microlight element with large content, resulting in a denial of service. NOTE: this is disputed by multiple parties because a large amount of memory and CPU resources is expected to be needed for content of that size.

• CWE-770

• https://gist.github.com/Rootingg/483b09b760d031b62b172f2153f3ed2a
• https://github.com/github/advisory-database/pull/5730
• https://gist.github.com/Rootingg/483b09b760d031b62b172f2153f3ed2a

Published

Jun 17, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-4551A vulnerability, which was classified as problematic, was fo…5.4
• CVE-2025-45512A lack of signature verification in the bootloader of DENX S…6.5
• CVE-2025-45513Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in t…9.8
• CVE-2025-45514Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in t…6.5
• CVE-2025-4552A vulnerability has been found in ContiNew Admin up to 3.6.0…8.1
• CVE-2025-45525A NULL pointer dereference vulnerability has been identified…2.9
• CVE-2025-45529An arbitrary file read vulnerability in the ReadTextAsynchro…7.1
• CVE-2025-4553A vulnerability was found in PHPGurukul Apartment Visitors M…9.8
• CVE-2025-4554A vulnerability was found in PHPGurukul Apartment Visitors M…9.8
• CVE-2025-45542SQL injection vulnerability in the registrationform endpoint…7.3
• CVE-2025-4555The web management interface of Okcat Parking Management Pla…9.8
• CVE-2025-4556The web management interface of Okcat Parking Management Pla…9.8