CVE-2026-13401
Vulnerability Description
XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes.
The parserc_parse function never advances the attribute-parse state cursor on certain malformed attribute forms, looping forever.
Nameless attributes such as "<a ='c'>" or unbalanced quotes "<a b='''''''c'>" can trigger this condition.
The parserc_parse function never advances the attribute-parse state cursor on certain malformed attribute forms, looping forever.
Nameless attributes such as "<a ='c'>" or unbalanced quotes "<a b='''''''c'>" can trigger this condition.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-835
Source
NVD
Vendor
CODECHILD
Product
XML::Bare
Discussion (0)
Add Comment
No comments yet. Be the first!