Read the docs

BPS

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

BPS records in CISA KEV

No BPS vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-14270 CVE-2025-15646 · GHSA-754r-h5mg-r795

Out-of-bounds read in BPS HTML::Gumbo

Priority MEDIUM 50

HTML::Gumbo versions before 0.19 for Perl disclose heap memory via type confusion.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00671 Published 2026-07-01 Fixed in 0.19 CWE-125
Open these records in search →