SUSE CVE-2026-116285

HTTP::Body versions before 1.2301 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. In chunked mode, used when no content length is given, add matches each chunk-size line with /^\da-fA-F+.\x0D\x0A/. On a line of hex digits whose first LF has no C...

CVE-2026-116285

HTTP::Body versions before 1.2301 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. In chunked mode, used when no content length is given, add matches each chunk-size line with /^\da-fA-F+.\x0D\x0A/. On a line of hex digits whose first LF has no C...

DEBIAN-CVE-2026-116285

HTTP::Body versions before 1.2301 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. In chunked mode, used when no content length is given, add matches each chunk-size line with /^\da-fA-F+.\x0D\x0A/. On a line of hex digits whose first LF has no C...

CVE-2026-116285

The HTTP::Body Perl module (versions before 1.23_01 ) is vulnerable to CPU exhaustion due to quadratic regex backtracking. When parsing chunked request bodies , the add() function matches chunk-size lines using the regex /^([ a-fA-F]+).* /. If a line of hex digits is provided where the first line...

CVE-2026-116285 HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies

HTTP::Body versions before 1.2301 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. In chunked mode, used when no content length is given, add matches each chunk-size line with /^\da-fA-F+.\x0D\x0A/. On a line of hex digits whose first LF has no C...

CVE-2026-116285

HTTP::Body versions before 1.2301 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. In chunked mode, used when no content length is given, add matches each chunk-size line with "/^\da-fA-F+.\x0D\x0A/". On a line of hex digits whose first LF has no...

CVE-2026-116285 HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies

HTTP::Body versions before 1.2301 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. In chunked mode, used when no content length is given, add matches each chunk-size line with /^\da-fA-F+.\x0D\x0A/. On a line of hex digits whose first LF has no C...

EUVD-2026-112274

HTTP::Body versions before 1.2301 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. In chunked mode, used when no content length is given, add matches each chunk-size line with /^\da-fA-F+.\x0D\x0A/. On a line of hex digits whose first LF has no C...

CVE-2026-116285

HTTP::Body versions before 1.2301 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. In chunked mode, used when no content length is given, add matches each chunk-size line with /^\da-fA-F+.\x0D\x0A/. On a line of hex digits whose first LF has no C...

Linux Distros Unpatched Vulnerability : CVE-2026-116285

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTP::Body versions before 1.2301 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. In chunked mode, used when...

PT-2026-128342

Name of the Vulnerable Software and Affected Versions HTTP::Body versions prior to 1.23 01 Description CPU exhaustion can occur when parsing chunked request bodies. In chunked mode, which is utilized when no content length is provided, the add function matches each chunk-size line using a regular...

SUSE CVE-2026-115822

Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. Starman decodes chunked request bodies before calling the application, matching each chunk-size line with s/^0-9a-fA-F+.\015\012//. A line of hex digits followed by a...

Linux Distros Unpatched Vulnerability : CVE-2026-115822

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. Starman decodes chunked reque...

DEBIAN-CVE-2026-115822

Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. Starman decodes chunked request bodies before calling the application, matching each chunk-size line with s/^0-9a-fA-F+.\015\012//. A line of hex digits followed by a...

CVE-2026-115822

Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. Starman decodes chunked request bodies before calling the application, matching each chunk-size line with s/^0-9a-fA-F+.\015\012//. A line of hex digits followed by a...

CVE-2026-115822

Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. Starman decodes chunked request bodies before calling the application, matching each chunk-size line with s/^0-9a-fA-F+.\015\012//. A line of hex digits followed by a...

UBUNTU-CVE-2026-115822

Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. Starman decodes chunked request bodies before calling the application, matching each chunk-size line with s/^0-9a-fA-F+.\015\012//. A line of hex digits followed by a...

CVE-2026-115822 Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies

Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. Starman decodes chunked request bodies before calling the application, matching each chunk-size line with s/^0-9a-fA-F+.\015\012//. A line of hex digits followed by a...

CVE-2026-115822

Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. Starman decodes chunked request bodies before calling the application, matching each chunk-size line with "s/^0-9a-fA-F+.\015\012//". A line of hex digits followed by...

CVE-2026-115822 Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies

Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. Starman decodes chunked request bodies before calling the application, matching each chunk-size line with s/^0-9a-fA-F+.\015\012//. A line of hex digits followed by a...