Debian/libhtml-parser-perl: high 7.5
HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities. The XS routine backing HTML::Entities::_decode_entities cached a pointer (repl) into the entity-value SV return
Action: Upgrade libhtml-parser-perl to 3.83-2~deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.83-2~deb13u1 | - |
Fixed versions
| 3.83-2~deb13u1 |
Sources
- osv: DEBIAN-CVE-2026-8829#Debian:13/libhtml-parser-perl
- https://security-tracker.debian.org/tracker/CVE-2026-8829
published · modified · JSON