XML::Bare vulnerabilities

2 known vulnerabilities in XML::Bare from CODECHILD. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  XML::Bare: Out-of-bounds Read

  CVE-2026-57074Jul 16, 2026CODECHILD

  XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. The parserc_parse function attempts to check for multicharacter strings such as "<![CDATA" or element terminators such as ">" without checking that the offsets are within the buffe

• 7.5 High severity

  XML::Bare: Loop with Unreachable Exit Condition

  CVE-2026-13401Jul 16, 2026CODECHILD

  XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes. The parserc_parse function never advances the attribute-parse state cursor on certain malformed attribute forms, looping forever. Nameless attributes such