CVE-2026-116130

HTTP::Parser::XS versions before 0.18 for Perl truncate PATHINFO at an encoded NUL byte in parsehttprequest. The XS parser URL-decodes the request path and measures the result with strlen, so PATHINFO ends at the first byte decoded from %00. The pure-Perl backend is not affected. A remote attacke...

CVE-2026-116130

The HTTP::Parser::XS module for Perl, in versions before 0.18 , is vulnerable to a Null Byte Interaction Error (CWE-626) . The XS parser URL-decodes the request path and uses strlen() to measure the result, causing PATH_INFO to be truncated at the first byte decoded from %00 . This issue specific...

CVE-2026-116130 HTTP::Parser::XS versions before 0.18 for Perl truncate PATH_INFO at an encoded NUL byte in parse_http_request

HTTP::Parser::XS versions before 0.18 for Perl truncate PATHINFO at an encoded NUL byte in parsehttprequest. The XS parser URL-decodes the request path and measures the result with strlen, so PATHINFO ends at the first byte decoded from %00. The pure-Perl backend is not affected. A remote attacke...

EUVD-2026-113904

HTTP::Parser::XS versions before 0.18 for Perl truncate PATHINFO at an encoded NUL byte in parsehttprequest. The XS parser URL-decodes the request path and measures the result with strlen, so PATHINFO ends at the first byte decoded from %00. The pure-Perl backend is not affected. A remote attacke...

CVE-2026-116130: Null Byte Interaction Error (Poison Null Byte)

HTTP::Parser::XS versions before 0.18 for Perl truncate PATHINFO at an encoded NUL byte in parsehttprequest. The XS parser URL-decodes the request path and measures the result with strlen, so PATHINFO ends at the first byte decoded from %00. The pure-Perl backend is not affected. A remote attacke...

OSV-2020-632 Global-buffer-overflow in parse_http_request

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14582 Crash type: Global-buffer-overflow READ 1 Crash state: parsehttprequest fuzzparsehttprequest...

OSV-2020-462 Global-buffer-overflow in strsep_char

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14509 Crash type: Global-buffer-overflow READ Crash state: strsepchar parseproxyprotocolv1 parsehttprequest...

OSV-2020-431 Global-buffer-overflow in parse_headers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14511 Crash type: Global-buffer-overflow READ 2 Crash state: parseheaders parsehttprequest fuzzparsehttprequest...

OSV-2020-322 Negative-size-param in parse_proxy_protocol_v2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14455 Crash type: Negative-size-param Crash state: parseproxyprotocolv2 parsehttprequest fuzzparsehttprequest...

lwan/request_fuzzer: Global-buffer-overflow in parse_http_request

Project: git://github.com/lpereira/lwan Detailed report: https://oss-fuzz.com/testcase?key=5729298679332864 Project: lwan Fuzzer: afllwanrequestfuzzer Fuzz target binary: requestfuzzer Job Type: aflasanlwan Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x0000011aeb3f...