CVE-2026-13575

The HTTP::Session Perl module (versions before 0.54 ) is vulnerable to memcached command injection via the HTTP::Session::Store::CHI component. The root cause is the lack of input validation on session IDs received from client cookies; unlike the Memcached store, the CHI store fails to reject or ...