VYPR

Web::Simple

by Perl Foundation

CVEs (1)

  • CVE-2026-114627Nov 4, 2026
    risk 0.00cvss —epss —

    Web::Simple versions before 0.036 for Perl do not escape values interpolated into double-quoted strings in HTML::Tags output. Under use HTML::Tags or use XML::Tags, a double-quoted string literal becomes a StringThing object that holds each interpolated value as a separate…