CVE-2025-22873

CVE-2025-22873 refers to a vulnerability in the tokenizer that incorrectly interprets tags. Specifically, it affects tags with unquoted attribute values ending with a solidus character (/). This can lead to the tags being incorrectly marked as self-closing. When using the Parse functions, content following such tags might be placed in the wrong scope during DOM construction. However, this only occurs when the tags are in foreign content contexts such as `<math>` or `<svg>`.