Threats tagged 'ghsa-fhx5-grqf-hx29'

CVE-2026-13051 is a critical vulnerability in Form::Processor::Field::HtmlArea for Perl versions 0.06 through 1.162360. It allows attackers to cause resource exhaustion or execute attacker-controlled method dispatch via crafted HTML::Tidy diagnostic messages used as Locale::Maketext templates. This can lead to unhandled exceptions or arbitrary memory allocation during form validation. Other field types are not affected as they handle templates differently.