CVE-2025-61634
HTML rest endpoint needs PoolCounter and proper parser cache check
published February 2, 2026
What it is
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Rest/Handler/PageHTMLHandler.Php.
This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1.
The record
Technical detail
- CVSS v4.0
- 0.0 · NONE
- Vector
- CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/RE:M/U:Green
- EPSS
- 0.00318 · 23.5th percentile
- Published
- 2026-02-02T23:28Z
EPSS history
Timeline