Skip to content
OpenAdvisories

Package · Debian

libweb-simple-perl

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Unscored —
    CVE-2026-120212

    Web::Simple versions before 0.037 for Perl do not escape single quotes in HTML::Tags output

    Web::Simple versions before 0.037 for Perl do not escape single quotes in HTML::Tags output. HTML::Tags and XML::Tags escape a plain string value by replacing only &, ", < and > with entities. A value interpolated into a single-quoted attribute, as in <a href…

    libweb-simple-perl Debian
  • Medium 6.1
    CVE-2026-114627

    Web::Simple versions before 0.036 for Perl do not escape values interpolated into double-quoted strings in HTML::Tags output

    Web::Simple versions before 0.036 for Perl do not escape values interpolated into double-quoted strings in HTML::Tags output. Under use HTML::Tags or use XML::Tags, a double-quoted string literal becomes a StringThing object that holds each interpolated value…

    libweb-simple-perl libweb-simple-perl Debian Ubuntu
  • High 7.5
    CVE-2026-114629

    Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters

    Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters. Web::Dispatch::ParamParser::get_unpacked_body_from reads an application/x-www-form-urlencoded body using a single read call, with n…

    libweb-simple-perl Debian