CVE-2026-116531

HTTP::Body versions before 1.2301 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk. In chunked mode, used when no content length is given, add treats a chunk as complete once the buffer is as long as the chunk's declared size, but the buffer still...

CVE-2026-117500

HTTP::Body versions before 1.2401 for Perl allow CPU exhaustion via regex backtracking on the filename of a multipart upload. For every file part, the multipart parser finds the suffix of the uploaded filename by matching the default $basenameregexp, qr/^.+.^\/+$/, against the whole basename. A...

CVE-2026-117501

HTTP::Body versions before 1.2401 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies. In chunked mode, used when no content length is given, add holds each chunk in memory until all of it has arrived. A line that is not a chunk-size line, a size line without CRLF, ...

CVE-2026-116285

HTTP::Body versions before 1.2301 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. In chunked mode, used when no content length is given, add matches each chunk-size line with /^\da-fA-F+.\x0D\x0A/. On a line of hex digits whose first LF has no C...

CVE-2026-116132

HTTP::Body versions before 1.2301 for Perl leave the temporary file of an incomplete multipart upload on disk. The multipart parser creates a temporary file as soon as a file part starts, but adds it to the upload list only when the part completes. Uploads are only ever deleted from that list, by...

CVE-2026-116131

HTTP::Body versions before 1.2301 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart parts. The urlencoded parser splits the whole body on its separators at once, creating one scalar per separator before any field is stored. This costs about 9...

CVE-2026-116133

HTTP::Body versions before 1.2301 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a missing or malformed boundary. Before the first part, and between parts, the multipart parser searches the whole buffered body for the next boundary. On a miss it keeps everything a...

CVE-2026-116134

HTTP::Body versions before 1.2301 for Perl allow memory exhaustion via an unbounded multipart part header block. The multipart parser takes everything up to the first blank line after a boundary as the part's header block, with no limit on its size or number of lines. Every line is stored in the...

CVE-2026-116135

HTTP::Body versions before 1.2301 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decoding them. The decode table holds only the all-lowercase and all-uppercase spelling of each hex pair, while the escape pattern matches either case. An escape such as %aB finds no...

CVE-2026-117501 HTTP::Body versions before 1.24_01 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies

HTTP::Body versions before 1.2401 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies. In chunked mode, used when no content length is given, add holds each chunk in memory until all of it has arrived. A line that is not a chunk-size line, a size line without CRLF, ...

CVE-2026-117501

The HTTP::Body module for Perl (versions before 1.24_01 ) is vulnerable to memory exhaustion due to unbounded buffering of chunked request bodies. When the parser receives a malformed chunked request—such as a line that is not a chunk-size line, a size line missing a CRLF, or an excessively large...

EUVD-2026-112277

HTTP::Body versions before 1.2401 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies. In chunked mode, used when no content length is given, add holds each chunk in memory until all of it has arrived. A line that is not a chunk-size line, a size line without CRLF, ...

CVE-2026-117500 HTTP::Body versions before 1.24_01 for Perl allow CPU exhaustion via regex backtracking on the filename of a multipart upload

HTTP::Body versions before 1.2401 for Perl allow CPU exhaustion via regex backtracking on the filename of a multipart upload. For every file part, the multipart parser finds the suffix of the uploaded filename by matching the default $basenameregexp, qr/^.+.^\/+$/, against the whole basename. A...

CVE-2026-117500

The HTTP::Body Perl module (versions before 1.24_01 ) is vulnerable to CPU exhaustion due to regex backtracking during multipart upload processing. The multipart parser uses a regular expression (qr/[^.]+( erm./[^\/]+)$/) to identify the suffix of uploaded filenames. A specially crafted basename ...

EUVD-2026-112276

HTTP::Body versions before 1.2401 for Perl allow CPU exhaustion via regex backtracking on the filename of a multipart upload. For every file part, the multipart parser finds the suffix of the uploaded filename by matching the default $basenameregexp, qr/^.+.^\/+$/, against the whole basename. A...

CVE-2026-116531

The HTTP::Body Perl module (versions before 1.23_01 ) is vulnerable to a flaw where it loses track of chunk boundaries in chunked request bodies if a read operation ends inside a chunk. The add() function may treat a chunk as complete prematurely or leave the parser unable to reach the 'done' sta...

CVE-2026-116531 HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk

HTTP::Body versions before 1.2301 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk. In chunked mode, used when no content length is given, add treats a chunk as complete once the buffer is as long as the chunk's declared size, but the buffer still...

CVE-2026-116531

HTTP::Body versions before 1.2301 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk. In chunked mode, used when no content length is given, add treats a chunk as complete once the buffer is as long as the chunk's declared size, but the buffer still...

EUVD-2026-112275

HTTP::Body versions before 1.2301 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk. In chunked mode, used when no content length is given, add treats a chunk as complete once the buffer is as long as the chunk's declared size, but the buffer still...

CVE-2026-116285

The HTTP::Body Perl module (versions before 1.23_01 ) is vulnerable to CPU exhaustion due to quadratic regex backtracking. When parsing chunked request bodies , the add() function matches chunk-size lines using the regex /^([ a-fA-F]+).* /. If a line of hex digits is provided where the first line...