CyberSecBulletin

BPS vulnerabilities

We track 1 vulnerability in BPS products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 1, 2026.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest BPS vulnerabilities

  • 9.8 Critical severity

    HTML::Gumbo: Out-of-bounds Read

    CVE-2025-15646BPS

    HTML::Gumbo versions before 0.19 for Perl disclose heap memory via type confusion. Support for the <template> element was added to libgumbo 0.10.0 in 2015, but the walk_tree function in lib/HTML/Gumbo.xs was not updated to support it. The element was treated a