/ 
HTML-Parser-3.38
River stage four • 597 direct dependents • 9844 total dependents
Security Advisories (1)
CVE-2009-3627 (2009-10-29)

The decode_entities function in util.c in HTML-Parser before 3.63 allows context-dependent attackers to cause a denial of service (infinite loop) via an incomplete SGML numeric character reference, which triggers generation of an invalid UTF-8 character.

Modules

HTML::Parser
HTML parser class
HTML::Entities
Encode or decode strings with HTML entities
HTML::Filter
Filter HTML text through the parser
HTML::HeadParser
Parse <HEAD> section of a HTML document
HTML::LinkExtor
Extract links from an HTML document
HTML::PullParser
Alternative HTML::Parser interface
HTML::TokeParser
Alternative HTML::Parser interface

Examples

Other files