Apache Tomcat - HTTP Request Smuggling

Apache Tomcat from versions 8.5.0 to 8.5.93, 9.0.0-M1 to 9.0.81, 10.1.0-M1 to 10.1.13, and 11.0.0-M1 to 11.0.0-M11 contain an improper input validation caused by incorrect parsing of HTTP trailer headers, letting attackers craft headers to cause request smuggling, exploit requires sending malicio...

CLEANSTART-2026-QS71019 When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request

Security vulnerability affects the trust-manager package. When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request...

PT-2026-146106

The MCUboot TLV iterator bootutil tlv iter next in boot/bootutil/src/tlv.c walks image trailer TLVs with a single loop guard it-tlv off tlv end and advances by sizeofstruct image tlv + tlv.it len using the attacker-controlled it len field, without validating that the entry's header or payload sta...

CLEANSTART-2026-PC03201 When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request

Security vulnerability affects the zookeeper-operator package. When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request...

Amazon Linux 2 : rclone (ALAS-2026-4081)

The version of rclone installed on the remote host is prior to 1.55.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4081 advisory. rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate that trusts checksums from...

SUSE CVE-2026-121006

HTTP::Body versions before 1.2402 for Perl parse the trailer in quadratic time. Everything after the last chunk in the same call to add is parsed with HTTP::Headers, which takes time quadratic in the number of fields of one name. For example, it takes several seconds to parse 16 KiB of "a:" lines...

CVE-2026-121006

HTTP::Body versions before 1.2402 for Perl parse the trailer in quadratic time. Everything after the last chunk in the same call to add is parsed with HTTP::Headers, which takes time quadratic in the number of fields of one name. For example, it takes several seconds to parse 16 KiB of "a:" lines...

DEBIAN-CVE-2026-121006

HTTP::Body versions before 1.2402 for Perl parse the trailer in quadratic time. Everything after the last chunk in the same call to add is parsed with HTTP::Headers, which takes time quadratic in the number of fields of one name. For example, it takes several seconds to parse 16 KiB of "a:" lines...

CVE-2026-121006

HTTP::Body versions before 1.2402 for Perl parse the trailer in quadratic time. Everything after the last chunk in the same call to add is parsed with HTTP::Headers, which takes time quadratic in the number of fields of one name. For example, it takes several seconds to parse 16 KiB of "a:" lines...

EUVD-2026-117992

HTTP::Body versions before 1.2402 for Perl parse the trailer in quadratic time. Everything after the last chunk in the same call to add is parsed with HTTP::Headers, which takes time quadratic in the number of fields of one name. For example, it takes several seconds to parse 16 KiB of "a:" lines...

CVE-2026-121006 HTTP::Body versions before 1.24_02 for Perl parse the trailer in quadratic time

HTTP::Body versions before 1.2402 for Perl parse the trailer in quadratic time. Everything after the last chunk in the same call to add is parsed with HTTP::Headers, which takes time quadratic in the number of fields of one name. For example, it takes several seconds to parse 16 KiB of "a:" lines...

CVE-2026-121006 HTTP::Body versions before 1.24_02 for Perl parse the trailer in quadratic time

HTTP::Body versions before 1.2402 for Perl parse the trailer in quadratic time. Everything after the last chunk in the same call to add is parsed with HTTP::Headers, which takes time quadratic in the number of fields of one name. For example, it takes several seconds to parse 16 KiB of "a:" lines...

CVE-2026-121006 HTTP::Body versions before 1.24_02 for Perl parse the trailer in quadratic time

HTTP::Body versions before 1.2402 for Perl parse the trailer in quadratic time. Everything after the last chunk in the same call to add is parsed with HTTP::Headers, which takes time quadratic in the number of fields of one name. For example, it takes several seconds to parse 16 KiB of "a:" lines...

CVE-2026-121006

The HTTP::Body module for Perl versions prior to 1.24_02 is vulnerable to a CPU exhaustion attack because it parses trailers in quadratic time . The issue arises because data following the last chunk in an add() call is processed by HTTP::Headers , which scales quadratically relative to the numbe...

CVE-2026-121006

HTTP::Body versions before 1.2402 for Perl parse the trailer in quadratic time. Everything after the last chunk in the same call to add is parsed with HTTP::Headers, which takes time quadratic in the number of fields of one name. For example, it takes several seconds to parse 16 KiB of "a:" lines...

PT-2026-137846

Name of the Vulnerable Software and Affected Versions HTTP::Body versions prior to 1.24 02 Description Processing of the trailer in the add function occurs in quadratic time. Data following the last chunk is parsed using HTTP::Headers, which exhibits quadratic time complexity relative to the numb...

CVE-2026-121006

HTTP::Body versions before 1.2402 for Perl parse the trailer in quadratic time. Everything after the last chunk in the same call to add is parsed with HTTP::Headers, which takes time quadratic in the number of fields of one name. For example, it takes several seconds to parse 16 KiB of "a:" lines...

Linux Distros Unpatched Vulnerability : CVE-2026-121006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTP::Body versions before 1.2402 for Perl parse the trailer in quadratic time. Everything after the last chunk in the same call to add is parsed with...

UBUNTU-CVE-2026-121006

HTTP::Body versions before 1.2402 for Perl parse the trailer in quadratic time. Everything after the last chunk in the same call to add is parsed with HTTP::Headers, which takes time quadratic in the number of fields of one name. For example, it takes several seconds to parse 16 KiB of "a:" lines...

CLEANSTART-2026-ND67671 When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request

Security vulnerability affects the rabbitmq-cluster-operator package. When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request...