Out-of-bounds Read in Codechild Html::bare

CVE-2026-57073

HTML::Bare versions through 0.04 for Perl have an unbounded character lookahead. The parserc_parse function attempts to check for multicharacter strings such as "<![CDATA" or element terminators such as ">" without checking that the offse…

Vulnerability class: Buffer Overflow

Affected products

Weakness classification (CWE)

References