VYPR

Data::MuForm

by Perl Foundation

CVEs (1)

  • CVE-2026-121632Nov 4, 2026
    risk 0.00cvss —epss —

    Data::MuForm versions through 0.05 for Perl render attribute values and option labels into HTML without escaping. process_attrs writes each attribute value into the markup as is. The select, radio group and checkbox group renderers pass each option to it, so an option's value…