An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.Referenceshttps://github.com/trajano/jtidy/issues/4