perl-HTML-FormHandler vulnerabilities (openSUSE)

5 vulnerabilities.

• perl-HTML-FormHandler openSUSE HTML::FormHandler versions before 0.410002 for Perl render field attributes into HTML without escaping using the process_attrs method CVE-2026-85630 Fix available 6.1 MediumSeptember 8, 2026
• perl-HTML-FormHandler openSUSE HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping CVE-2026-85485 Fix available 6.1 MediumSeptember 8, 2026
• perl-HTML-FormHandler openSUSE HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping CVE-2026-85484 Fix available 6.1 MediumSeptember 8, 2026
• perl-HTML-FormHandler openSUSE HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message CVE-2026-19872 Fix available 6.1 MediumSeptember 8, 2026
• perl-HTML-FormHandler openSUSE HTML::FormHandler versions before 0.410000 for Perl allow attacker selected method dispatch and resource exhaustion because _apply_actions and add_error use error message text built from request data… CVE-2022-4993 Fix available 9.1 CriticalAugust 13, 2026