CVE-2022-29546

CVE-2022-29546 is a denial-of-service vulnerability affecting HtmlUnit NekoHtml Parser versions prior to 2.61.0. Specifically, crafted input related to Processing Instruction (PI) data parsing can lead to excessive heap memory consumption. This vulnerability has a CVSS score of 7.5 (High), indicating it can be exploited remotely without user interaction to cause a complete denial of service. While there is no known active exploitation or public exploit code, the vulnerability has garnered some community discussion and media coverage, including a mention in an article about Atlassian patches.