CVE-2026-121008

The SQL::Abstract::Tree module for Perl (versions before 2.000001_04 ) is vulnerable to Cross-Site Scripting (XSS) . The root cause is that the format method fails to HTML-escape SQL text or bind values when using the html profile , which is designed to output markup for web pages. This allows an...