Most recent entries from all

EUVD-2026-338573

fkie_cve-2026-57074

XML::Bare versions through 0.53 for Perl have an unbounded character lookahead.

The parserc_parse function attempts to check for multicharacter strings such as "<![CDATA" or element terminators such as ">" without checking that the offsets are within the buffer.

Truncated strings such as "<a/" can trigger an out-of-bounds read.

GHSA-xm8x-vw7j-573w

XML::Bare versions through 0.53 for Perl have an unbounded character lookahead.

The parserc_parse function attempts to check for multicharacter strings such as "<![CDATA" or element terminators such as ">" without checking that the offsets are within the buffer.

Truncated strings such as "<a/" can trigger an out-of-bounds read.

openSUSE-SU-2026:11351-1 — perl-XML-Bare-0.53-7.1 on GA media

perl-XML-Bare-0.53-7.1 on GA media

UBUNTU-CVE-2026-57074

Affected: Ubuntu:16.04:LTS: libxml-bare-perl, Ubuntu:18.04:LTS: libxml-bare-perl, Ubuntu:20.04:LTS: libxml-bare-perl, Ubuntu:22.04:LTS: libxml-bare-perl, Ubuntu:24.04:LTS: libxml-bare-perl, Ubuntu:26.04:LTS: libxml-bare-perl

XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. The parserc_parse function attempts to check for multicharacter strings such as "<![CDATA" or element terminators such as ">" without checking that the offsets are within the buffer. Truncated strings such as "<a/" can trigger an out-of-bounds read.