RLSA-2026:99212 Important: perl-CGI security update

CGI.pm is a stable, complete and mature solution for processing and preparing HTTP requests and responses. Major features including processing form submissions, file uploads, reading and writing cookies, query string generation and manipulation, and processing and preparing HTTP headers. Some HTM...

RLSA-2026:99215 Important: perl-CGI security update

CGI.pm is a stable, complete and mature solution for processing and preparing HTTP requests and responses. Major features including processing form submissions, file uploads, reading and writing cookies, query string generation and manipulation, and processing and preparing HTTP headers. Some HTM...

perl-CGI security update

An update is available for perl-CGI. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list CGI.pm is a stable, complete and mature solution for processing and preparin...

CVE-2026-29780

Path Traversal in Official Example Script Leading to Arbitrary File Write Summary The official example script examples/recursivelyextractattachments.py contains a path traversal vulnerability that allows arbitrary file write outside the intended output directory. Attachment filenames extracted fr...

CVE-2025-71461

The Zipline application, versions before 4.0.2 , is vulnerable to a predictable filename flaw caused by the use of a cryptographically weak pseudo-random number generator (Math.random ). By obtaining five consecutive gfycat-style filenames, an attacker can reconstruct the random generator's state...

EduSoho < 22.4.7 - Unauthenticated Arbitrary File Read

EduSoho 22.4.7 contains a path traversal caused by crafted path traversal sequences in the fileNames parameter in classroom-course-statistics export functionality, letting remote unauthenticated attackers read arbitrary files including sensitive configuration files, exploit requires no...

Important: Red Hat Security Advisory: perl-CGI security update

An update for perl-CGI is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

perl-cgi: perl-cgi: arbitrary file write via unsanitized upload filenames

A flaw was found in perl-cgi. The module returns client-supplied upload filenames without sanitizing directory traversal sequences or path separators. A remote attacker can exploit this flaw by submitting a file upload with a crafted filename, potentially causing the host application to write fil...

CVE-2024-25081_2025-47273

CVE-2024-25081 and CVE-2025-47273 Proof of Concept FontForge ≤ 20230101 version and Setuptools library Proof of concept for elevating privileges to the user running a task that uses Font Forge. The second CVE elevates privileges to root, provided you have write permissions to sensitive directorie...

perl-cgi: perl-cgi: arbitrary file write via unsanitized upload filenames

A flaw was found in perl-cgi. The module returns client-supplied upload filenames without sanitizing directory traversal sequences or path separators. A remote attacker can exploit this flaw by submitting a file upload with a crafted filename, potentially causing the host application to write fil...

Important: Red Hat Security Advisory: perl-CGI security update

An update for perl-CGI is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

Important: Red Hat Security Advisory: perl-CGI security update

An update for perl-CGI is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

perl-cgi: perl-cgi: arbitrary file write via unsanitized upload filenames

A flaw was found in perl-cgi. The module returns client-supplied upload filenames without sanitizing directory traversal sequences or path separators. A remote attacker can exploit this flaw by submitting a file upload with a crafted filename, potentially causing the host application to write fil...

ALSA-2026:99849 Important: perl-CGI security update

CGI.pm is a stable, complete and mature solution for processing and preparing HTTP requests and responses. Major features including processing form submissions, file uploads, reading and writing cookies, query string generation and manipulation, and processing and preparing HTTP headers. Some HTM...

RHEL 10 : perl-CGI (RHSA-2026:99212)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:99212 advisory. CGI.pm is a stable, complete and mature solution for processing and preparing HTTP requests and responses. Major features including...

RHEL 9 : perl-CGI (RHSA-2026:99215)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:99215 advisory. CGI.pm is a stable, complete and mature solution for processing and preparing HTTP requests and responses. Major features including...

Important: Red Hat Security Advisory: perl-CGI security update

An update for perl-CGI is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

perl-cgi: perl-cgi: arbitrary file write via unsanitized upload filenames

A flaw was found in perl-cgi. The module returns client-supplied upload filenames without sanitizing directory traversal sequences or path separators. A remote attacker can exploit this flaw by submitting a file upload with a crafted filename, potentially causing the host application to write fil...

perl-cgi: perl-cgi: arbitrary file write via unsanitized upload filenames

A flaw was found in perl-cgi. The module returns client-supplied upload filenames without sanitizing directory traversal sequences or path separators. A remote attacker can exploit this flaw by submitting a file upload with a crafted filename, potentially causing the host application to write fil...

CVE-2026-126776

SiYuan 3.7.0 before 3.8.10 on Windows contains a path traversal vulnerability in kernel/util/webfetch.go that allows attackers to write files outside the import directory via backslash-encoded filenames. Attackers controlling a URL fetched by the MCP webfetch or httprequest tools can use...