CVE-2026-60074

The Date::Manip Perl module (versions through 6.99 ) is vulnerable to date corruption because its parse regexes use the \d shorthand, which matches the Unicode decimal digit property \p{Nd} instead of just [0-9] . When processing strings containing non-ASCII decimal digits, the module's check fun...

EUVD-2026-45190

HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parsedate. parsedate matches the date string against a chain of alternative regexes, and str2time delegates to it. Several of these patterns place unbounded quantifiers next to each other before a...

CVE-2026-14741

The HTTP::Date module for Perl (versions before 6.08 ) is vulnerable to CPU exhaustion via polynomial regex backtracking in the parse_date() function. The issue arises because several regex patterns use unbounded quantifiers next to each other before a trailing or anchor. When processing a valid ...