An issue was discovered htmlcleaner thru = 2.28 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.
https://www.debian.org/security/2023/dsa-5471
https://lists.debian.org/debian-lts-announce/2023/08/msg00007.html