https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 14:53:40 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-338409 EUVD-2026-338409 https://cve.radiocsirt.org/vuln/euvd-2026-338409 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13401 <p>XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes.</p> <p>The parserc_parse function never advances the attribute-parse state cursor on certain malformed attribute forms, looping forever.</p> <p>Nameless attributes such as &#34;&lt;a =&#39;c&#39;&gt;&#34; or unbalanced quotes &#34;&lt;a b=&#39;&#39;&#39;&#39;&#39;&#39;&#39;c&#39;&gt;&#34; can trigger this condition.</p> <p>XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes.</p> <p>The parserc_parse function never advances the attribute-parse state cursor on certain malformed attribute forms, looping forever.</p> <p>Nameless attributes such as &#34;&lt;a =&#39;c&#39;&gt;&#34; or unbalanced quotes &#34;&lt;a b=&#39;&#39;&#39;&#39;&#39;&#39;&#39;c&#39;&gt;&#34; can trigger this condition.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-13401 https://cve.radiocsirt.org/vuln/ghsa-8299-xh3w-xhx5 <p>XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes.</p> <p>The parserc_parse function never advances the attribute-parse state cursor on certain malformed attribute forms, looping forever.</p> <p>Nameless attributes such as &#34;&lt;a =&#39;c&#39;&gt;&#34; or unbalanced quotes &#34;&lt;a b=&#39;&#39;&#39;&#39;&#39;&#39;&#39;c&#39;&gt;&#34; can trigger this condition.</p> <p>XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes.</p> <p>The parserc_parse function never advances the attribute-parse state cursor on certain malformed attribute forms, looping forever.</p> <p>Nameless attributes such as &#34;&lt;a =&#39;c&#39;&gt;&#34; or unbalanced quotes &#34;&lt;a b=&#39;&#39;&#39;&#39;&#39;&#39;&#39;c&#39;&gt;&#34; can trigger this condition.</p> https://cve.radiocsirt.org/vuln/ghsa-8299-xh3w-xhx5 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11351-1 <p>perl-XML-Bare-0.53-7.1 on GA media</p> <p>perl-XML-Bare-0.53-7.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11351-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-13401 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libxml-bare-perl, Ubuntu:18.04:LTS: libxml-bare-perl, Ubuntu:20.04:LTS: libxml-bare-perl, Ubuntu:22.04:LTS: libxml-bare-perl, Ubuntu:24.04:LTS: libxml-bare-perl, Ubuntu:26.04:LTS: libxml-bare-perl</p> <p>XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes. The parserc_parse function never advances the attribute-parse state cursor on certain malformed attribute forms, looping forever. Nameless attributes such as &#34;&lt;a =&#39;c&#39;&gt;&#34; or unbalanced quotes &#34;&lt;a b=&#39;&#39;&#39;&#39;&#39;&#39;&#39;c&#39;&gt;&#34; can trigger this condition.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libxml-bare-perl, Ubuntu:18.04:LTS: libxml-bare-perl, Ubuntu:20.04:LTS: libxml-bare-perl, Ubuntu:22.04:LTS: libxml-bare-perl, Ubuntu:24.04:LTS: libxml-bare-perl, Ubuntu:26.04:LTS: libxml-bare-perl</p> <p>XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes. The parserc_parse function never advances the attribute-parse state cursor on certain malformed attribute forms, looping forever. Nameless attributes such as &#34;&lt;a =&#39;c&#39;&gt;&#34; or unbalanced quotes &#34;&lt;a b=&#39;&#39;&#39;&#39;&#39;&#39;&#39;c&#39;&gt;&#34; can trigger this condition.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-13401