VYPR

HTML Gumbo

by Bestpractical

CVEs (1)

  • CVE-2025-15646CriJul 1, 2026
    risk 0.64cvss 9.8epss 0.01

    HTML::Gumbo versions before 0.19 for Perl disclose heap memory via type confusion. Support for the element was added to libgumbo 0.10.0 in 2015, but the walk_tree function in lib/HTML/Gumbo.xs was not updated to support it. The element was treated as a text-node,…