https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T13:53:39.381742+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-338442 EUVD-2026-338442 2026-10-08T13:53:39.415442+00:00 EUVD-2026-338442 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13397 fkie_cve-2026-13397 2026-10-08T13:53:39.415481+00:00

HTML::Bare versions through 0.04 for Perl will hang in an infinite loop when parsing malformed attributes.

The parserc_parse function never advances the attribute-parse state cursor on certain malformed attribute forms, looping forever.

Nameless attributes such as "<a ='c'>" or unbalanced quotes "<a b='''''''c'>" can trigger this condition.

Note that the latest version available on CPAN is version 0.02. Newer versions are available on the git repository.

 https://cve.radiocsirt.org/vuln/ghsa-xfxg-9rjg-hqrw GHSA-xfxg-9rjg-hqrw 2026-10-08T13:53:39.415521+00:00

HTML::Bare versions through 0.04 for Perl will hang in an infinite loop when parsing malformed attributes.

The parserc_parse function never advances the attribute-parse state cursor on certain malformed attribute forms, looping forever.

Nameless attributes such as "<a ='c'>" or unbalanced quotes "<a b='''''''c'>" can trigger this condition.

Note that the latest version available on CPAN is version 0.02. Newer versions are available on the git repository.