19020 matches found
CVE-2026-78183
DBD::Pg version 3.21.0 for Perl contains a heap out-of-bounds write in the quote_float function (in quote.c). The function allocates a buffer of length + 1 bytes for numeric strings, but when emitting special float literals (NaN, Inf, +Inf, -Inf, Infinity, +Infinity, -Infinity), it writes the lit...
CVE-2026-78183
DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quotefloat. quotefloat allocates the length of the string + 1, which is the size of the bare numeric symbol plus NULL. But for special literals NaN, Inf, +Inf, -Inf, Infinity, +Infinity, -Infinity it emits the literal surrounded by...
CVE-2026-19565 Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey
Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey. CreateSessionAuthKey runs five rounds of SHA-256, each over a fresh Time::HiRes reading formatted to six decimal places, the running...
EUVD-2026-64663
Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey. CreateSessionAuthKey runs five rounds of SHA-256, each over a fresh Time::HiRes reading formatted to six decimal places, the running...
CVE-2026-75922
Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATHINFO written unencoded to the upstream request line. PSGI hands PATHINFO to an application percent-decoded, so a %XX sequence in the client URL has become a raw byte by the time the proxy sees it...
CVE-2026-75922
Reverse::Proxy (CPAN module by LNATION) versions before 0.04 for Perl are vulnerable to HTTP request smuggling via a percent-decoded PATH_INFO written unencoded into the upstream request line. Because PSGI delivers PATH_INFO already decoded, a client-controlled %0d%0a in the URL becomes a raw CRL...
CVE-2026-75922 Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unencoded to the upstream request line
Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATHINFO written unencoded to the upstream request line. PSGI hands PATHINFO to an application percent-decoded, so a %XX sequence in the client URL has become a raw byte by the time the proxy sees it...
EUVD-2026-64662
Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATHINFO written unencoded to the upstream request line. PSGI hands PATHINFO to an application percent-decoded, so a %XX sequence in the client URL has become a raw byte by the time the proxy sees it...
ROOT-OS-DEBIAN-11-CVE-2026-42497 CVE-2026-42497 in perl - Patched by Root
Root has patched CVE-2026-42497 in the perl package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-8376 CVE-2026-8376 in perl - Patched by Root
Root has patched CVE-2026-8376 in the perl package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-12087 CVE-2026-12087 in perl - Patched by Root
Root has patched CVE-2026-12087 in the perl package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-15649 CVE-2025-15649 in perl - Patched by Root
Root has patched CVE-2025-15649 in the perl package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-48961 CVE-2026-48961 in perl - Patched by Root
Root has patched CVE-2026-48961 in the perl package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-9538 CVE-2026-9538 in perl - Patched by Root
Root has patched CVE-2026-9538 in the perl package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-7010 CVE-2026-7010 in perl - Patched by Root
Root has patched CVE-2026-7010 in the perl package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-7017 CVE-2026-7017 in perl - Patched by Root
Root has patched CVE-2026-7017 in the perl package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-57432 CVE-2026-57432 in perl - Patched by Root
Root has patched CVE-2026-57432 in the perl package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-13221 CVE-2026-13221 in perl - Patched by Root
Root has patched CVE-2026-13221 in the perl package for Root:Debian:11. Multiple fixed versions available...