CVE-2026-7017 HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets

🗓️ 07 Jul 2026 17:41:48Reported by GoogleType

osv🔗 osv.dev👁 2 Views

CVE-2026-7017: HTTP::Tiny forwards Authorization, Cookie, and Proxy-Authorization headers on redirects across origins.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2026-7017	7 Jul 202617:41	–	attackerkb
Circl	CVE-2026-7017	7 Jul 202619:24	–	circl
CVE	CVE-2026-7017	7 Jul 202617:41	–	cve
Cvelist	CVE-2026-7017 HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets	7 Jul 202617:41	–	cvelist
Debian CVE	CVE-2026-7017	7 Jul 202617:41	–	debiancve
EUVD	EUVD-2026-42072	7 Jul 202617:41	–	euvd
NVD	CVE-2026-7017	7 Jul 202619:16	–	nvd
OSV	DEBIAN-CVE-2026-7017	7 Jul 202619:16	–	osv
OSV	ECHO-2E89-77F4-18BD	8 Jul 202607:52	–	osv
Positive Technologies	PT-2026-56232	7 Jul 202600:00	–	ptsecurity

Source	Link
openwall	www.openwall.com/lists/oss-security/2026/07/07/13
cpan	www.cpan.org/modules
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/7xxx/CVE-2026-7017.json
github	www.github.com/Perl-Toolchain-Gang/HTTP-Tiny
github	www.github.com/Perl-Toolchain-Gang/HTTP-Tiny/commit/84984ef3930ddd4afcf5eb83b40d3cee200739c3.patch
github	www.github.com/Perl-Toolchain-Gang/HTTP-Tiny/commit/8f32ca89e21c3ad0422adc698fa6ad17a193f55f.patch
github	www.github.com/Perl-Toolchain-Gang/HTTP-Tiny/commit/e7a03aedf2395158f2b0d3bad2df943349227bb3.patch
github	www.github.com/Perl-Toolchain-Gang/HTTP-Tiny/pull/36
metacpan	www.metacpan.org/release/HAARG/HTTP-Tiny-0.095-TRIAL/changes
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-7017

08 Jul 2026 08:10Current

6Medium risk

Vulners AI Score6

CVSS 3.17.1

EPSS0.0026