PT-2026-1349

Name of the Vulnerable Software and Affected Versions AIOHTTP versions 3.13.2 and below Description AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python, may be susceptible to a request smuggling attack when using versions 3.13.2 and below. This issue arises from the...

MGASA-2025-0274 Updated perl packages fix security vulnerabilities

CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. CVE-2023-31484 Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes. CVE-2024-56406 Perl threads have a working directory race condition where file operations may target...

EUVD-2019-2754

Malware in sbrugna...

EUVD-2011-2054

Malware in sbrugna...

EUVD-2019-5959

Malware in sbrugna...

EUVD-2019-2190

Malware in sbrugna...

EUVD-2011-1937

Malware in sbrugna...

EUVD-2006-3295

Malware in sbrugna...

EUVD-2013-4426

Malware in sbrugna...

EUVD-2009-0884

Malware in sbrugna...

EUVD-2012-2664

Malware in sbrugna...

EUVD-2012-0008

Malware in sbrugna...

EUVD-2005-1272

Malware in sbrugna...

EUVD-2012-0480

Malware in sbrugna...

EUVD-2024-51313

Malicious code in bioql PyPI...

EUVD-2024-54400

Malicious code in bioql PyPI...

perl security update

An update is available for perl. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Perl is a high-level programming language that is commonly used for system...

RLSA-2025:7500 Important: perl security update

Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl 5.34, 5.36, 5.38 and 5.40 are vulnerable to a heap buffer overflow when transliterating non-ASCII bytes CVE-2024-56406 For more details about the...

SUSE-SU-2025:20532-1 Security update for perl

This update for perl fixes the following issues: - CVE-2024-56406: Fixed heap buffer overflow when transliterating non-ASCII bytes bsc1241083 - CVE-2025-40909: Fixed a working directory race condition causing file operations to target unintended paths bsc1244079...

GHSA-6R3C-XF4W-JXJM Spring Framework vulnerable to a reflected file download (RFD)

Description In Spring Framework, versions 6.0.x as of 6.0.5, versions 6.1.x and 6.2.x, an application is vulnerable to a reflected file download RFD attack when it sets a “Content-Disposition” header with a non-ASCII charset, where the filename attribute is derived from user-supplied input...