CVE-2026-13051 Form::Processor::Field::HtmlArea versions from 0.06 through 1.162360 for Perl allow attacker selected method dispatch and resource exhaustion via an HTML::Tidy diagnostic that validate passes to add_error as a Locale::Maketext template

[
  {
    "collectionURL": "https://cpan.org/modules",
    "defaultStatus": "unaffected",
    "modules": [
      "Form::Processor::Field::HtmlArea"
    ],
    "packageName": "Form-Processor",
    "packageURL": "pkg:cpan/Form-Processor",
    "programFiles": [
      "lib/Form/Processor/Field/HtmlArea.pm",
      "lib/Form/Processor/Field.pm",
      "lib/Form/Processor/I18N/en_us.pm"
    ],
    "programRoutines": [
      {
        "name": "Form::Processor::Field::HtmlArea::validate"
      },
      {
        "name": "Form::Processor::Field::add_error"
      }
    ],
    "versions": [
      {
        "lessThanOrEqual": "1.162360",
        "status": "affected",
        "version": "0.06",
        "versionType": "custom"
      }
    ]
  }
]