2 matches found
[SECURITY] Fedora 43 Update: perl-HTML-Gumbo-0.19-1.fc43
Gumbo is an implementation of the HTML5 parsing algorithm implemented as a pure C99 library with no outside dependencies...
9.8CVSS6.1AI score0.00512EPSS
SaveExploits0
CVE-2025-15646
HTML::Gumbo versions before 0.19 for Perl disclose heap memory via type confusion. Support for the element was added to libgumbo 0.10.0 in 2015, but the walktree function in lib/HTML/Gumbo.xs was not updated to support it. The element was treated as a text-node, where strlen over-reads the heap...
9.8CVSS6.1AI score0.00512EPSS
SaveExploits0References3
20