Template::Plugin::HTML versions through 3.102 for Perl allows HTML and JavaScript to be injected. (CVE-2026-5090)
{ "section": "core" }
"https://advisories.mageia.org/MGASA-2026-0166.json"