Debian/libhtml-formhandler-perl: medium 6.1
HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping. The Table form layout and the Bootstrap 2 and 3 wrappers splice each error string straight in
Action: Upgrade libhtml-formhandler-perl to 0.410002-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.410002-1 | - |
Fixed versions
| 0.410002-1 |
Sources
- osv: DEBIAN-CVE-2026-85485#Debian:14/libhtml-formhandler-perl
- https://security-tracker.debian.org/tracker/CVE-2026-85485
published · modified · JSON