Unrated
The XAO::Web module before 1.84 for Perl mishandles < and > characters in JSON output during use of json-embed in Web::Action.
CVE-2020-36827
First seen on SecPulse
References
- patch github.com
- web metacpan.org