CVE-2026-85630 HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escaping using the process_attrs method

[
  {
    "collectionURL": "https://cpan.org/modules",
    "defaultStatus": "unaffected",
    "modules": [
      "HTML::FormHandler"
    ],
    "packageName": "HTML-FormHandler",
    "packageURL": "pkg:cpan/HTML-FormHandler",
    "programFiles": [
      "lib/HTML/FormHandler/Render/Util.pm"
    ],
    "programRoutines": [
      {
        "name": "HTML::FormHandler::Render::Util::process_attrs"
      }
    ],
    "repo": "https://github.com/gshank/html-formhandler",
    "versions": [
      {
        "lessThan": "0.410002",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]