Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-85485

HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping

cve-program · severity unknownCVSS unknownCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-85485

Published

HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping. The Table form layout and the Bootstrap 2 and 3 wrappers splice each error string straight into the surrounding markup. Version 0.410000, the fix for CVE-2026-19872, escaped the equivalent values in the other layouts and wrappers, and 0.410002 extended that to these three. Error messages that contain attacker-influenced content such as rejected field values could embed JavaScript in rendered pages.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-85485

Published

HTML-FormHandler

https://cpan.org/modules

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "collectionURL": "https://cpan.org/modules",
                    "defaultStatus": "unaffected",
                    "modules": [
                        "HTML::FormHandler"
                    ],
                    "packageName": "HTML-FormHandler",
                    "packageURL": "pkg:cpan/HTML-FormHandler",
                    "programFiles": [
                        "lib/HTML/FormHandler/Widget/Form/Table.pm",
                        "lib/HTML/FormHandler/Widget/Wrapper/Bootstrap.pm",
                        "lib/HTML/FormHandler/Widget/Wrapper/Bootstrap3.pm"
                    ],
                    "programRoutines": [
                        {
                            "name": "HTML::FormHandler::Widget::Form::Table::render_form_errors"
                        },
                        {
                            "name": "HTML::FormHandler::Widget::Wrapper::Bootstrap::wrap_field"
                        },
                        {
                            "name": "HTML::FormHandler::Widget::Wrapper::Bootstrap3::wrap_field"
                        }
                    ],
                    "repo": "https://github.com/gshank/html-formhandler",
                    "versions": [
                        {
                            "lessThan": "0.410002",
                            "status": "affected",
                            "version": "0",
                            "versionType": "custom"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON