CVE-2026-120645 CGI versions before 5.00 for Perl allow denial of service via submitted values used as a regex for optgroup selection in scrolling_list

CGI versions before 5.00 for Perl allow denial of service via submitted values used as a regex for optgroup selection in scrollinglist. When rendering option groups, scrollinglist marks the selected options by interpolating each selected value, by default taken from the request parameters,...

CVE-2026-120645

CGI versions before 5.00 for Perl (specifically perl-cgi ) are vulnerable to a Denial of Service (DoS) . The flaw exists in the scrolling_list function, where user-supplied input from request parameters is interpolated directly into a substitution pattern as an unescaped regular expression for op...