Advisories » MGASA-2026-0166

Updated perl-Template-Toolkit packages fix security vulnerability

Publication date: 30 May 2026
Modification date: 30 May 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2026-5090

Description

Template::Plugin::HTML versions through 3.102 for Perl allows HTML and
JavaScript to be injected. (CVE-2026-5090)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=35554
• https://www.openwall.com/lists/oss-security/2026/05/19/40
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5090

SRPMS

9/core

• perl-Template-Toolkit-3.101.0-1.1.mga9