CVE-2025-15646

Name of the Vulnerable Software and Affected Versions HTML::Gumbo versions prior to 0.19

Description Type confusion occurs when the walk tree() function in lib/HTML/Gumbo.xs fails to properly handle the <template> element. This element is incorrectly treated as a text node, causing strlen() to over-read the heap block. When the parse() function is called with the format variable set to either string or tree on input containing a <template> element, bounded heap contents are disclosed in the returned result. Calls using format set to callback are not affected as they trigger a croak on the unhandled node type.

Recommendations Update HTML::Gumbo to version 0.19 or later.