Critical Vulnerability in HTML-Parser Exposes Sensitive Information

A critical vulnerability has been identified in the HTML-Parser library used in various Ubuntu versions. The flaw arises from improper handling of entity references, allowing attackers to potentially access sensitive information. Affected systems include Ubuntu 26.04 LTS, 24.04 LTS, and 22.04 LTS, specifically the libhtml-parser-perl package. The vulnerability can be exploited if the input string matches an entity value in the lookup table. Users are advised to update their systems to the latest package versions to mitigate this risk. The issue was disclosed on July 22, 2026, and is categorized under Ubuntu Security Notice USN-8587-1. A standard system update is recommended to apply the necessary patches.

Key Points: • A critical vulnerability in HTML-Parser could expose sensitive information. • Affected Ubuntu versions include 26.04 LTS, 24.04 LTS, and 22.04 LTS. • Users should update to the latest libhtml-parser-perl package versions immediately.