{"id":"CVE-2020-36827","details":"The XAO::Web module before 1.84 for Perl mishandles \u003c and \u003e characters in JSON output during use of json-embed in Web::Action.","modified":"2026-07-08T05:56:54.544313290Z","published":"2024-03-24T01:15:45.453Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"fixed":"1.84"}],"source":"DESCRIPTION"}]},"references":[{"type":"WEB","url":"https://metacpan.org/dist/XAO-Web/changes"},{"type":"FIX","url":"https://github.com/amaltsev/XAO-Web/commit/20dd1d3bc5b811503f5722a16037b60197fe7ef4"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/amaltsev/xao-web","events":[{"introduced":"0"},{"fixed":"20dd1d3bc5b811503f5722a16037b60197fe7ef4"}],"database_specific":{"source":"REFERENCES"}}],"versions":["1.82","1.80","1.79","1.78","1.77","1.76","1.75","1.73","1.72","1.70","1.69","1.68","1.67","1.66","1.65","1.64","1.63","1.55","1.54","1.51","1.49","1.48","1.10","1.06","1.03","1.02","1.01","1.05","1.04","1.0","0.10"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-36827.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"}]}