CVE-2026-121008

A flaw was found in perl-sql-abstract. The SQL::Abstract::Tree component does not properly HTML-escape SQL text or bind values when generating output using the HTML profile. If an application displays this formatted SQL in a web interface, such as a debug panel or query log, an attacker who...