CVE-2026-8829

The HTML::Entities module for Perl (versions before 3.84) contains a use-after-free vulnerability in the _decode_entities function. The underlying XS routine incorrectly caches a pointer to an entity-value SV; when input matches a value containing its own key as an entity reference, a subsequent ...