CVE-2026-85484 HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping

[
  {
    "collectionURL": "https://cpan.org/modules",
    "defaultStatus": "unaffected",
    "modules": [
      "HTML::FormHandler"
    ],
    "packageName": "HTML-FormHandler",
    "packageURL": "pkg:cpan/HTML-FormHandler",
    "programFiles": [
      "lib/HTML/FormHandler/Widget/Field/CheckboxGroup.pm",
      "lib/HTML/FormHandler/Widget/Field/HorizCheckboxGroup.pm",
      "lib/HTML/FormHandler/Widget/Field/RadioGroup.pm",
      "lib/HTML/FormHandler/Widget/Field/Select.pm"
    ],
    "programRoutines": [
      {
        "name": "HTML::FormHandler::Widget::Field::CheckboxGroup::render_element"
      },
      {
        "name": "HTML::FormHandler::Widget::Field::HorizCheckboxGroup::render_element"
      },
      {
        "name": "HTML::FormHandler::Widget::Field::RadioGroup::render_element"
      },
      {
        "name": "HTML::FormHandler::Widget::Field::RadioGroup::wrap_radio"
      },
      {
        "name": "HTML::FormHandler::Widget::Field::Select::render_element"
      }
    ],
    "repo": "https://github.com/gshank/html-formhandler",
    "versions": [
      {
        "lessThan": "0.410002",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]