Lucene search
+L

20 matches found

Fedora
Fedora
•added 2026/06/11 1:09 a.m.•41 views

[SECURITY] Fedora 43 Update: xmlstarlet-1.6.1-30.fc43

XMLStarlet is a set of command line utilities which can be used to transform, query, validate, and edit XML documents and files using simple set of shell commands in similar way it is done for plain text files using UNIX grep, sed, awk, diff, patch, join, etc commands...

5.5AI score
SaveExploits0
OSV
OSV
•added 2026/05/07 5:06 a.m.•23 views

MGASA-2026-0120 Updated perl-Starlet packages fix security vulnerability

Starlet versions through 0.31 for Perl allow HTTP Request Smuggling via Improper Header Precedence. CVE-2026-40561...

5.3CVSS5.8AI score0.00433EPSS
SaveExploits0References4
Mageia
Mageia
•added 2026/05/07 5:06 a.m.•76 views

Updated perl-Starlet packages fix security vulnerability

Starlet versions through 0.31 for Perl allow HTTP Request Smuggling via Improper Header Precedence. CVE-2026-40561...

5.3CVSS5.8AI score0.00433EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/05/04 8:21 p.m.•17 views

CVE-2026-40561

Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An...

5.3CVSS5.8AI score0.00433EPSS
SaveExploits0References1
OSV
OSV
•added 2026/05/03 1:15 a.m.•165 views

DEBIAN-CVE-2026-40561

Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An...

5.3CVSS5.8AI score0.00433EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/05/03 1:15 a.m.•14 views

CVE-2026-40561

Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An...

5.3CVSS5.8AI score0.00433EPSS
SaveExploits0References2
OSV
OSV
•added 2026/05/03 1:15 a.m.•15 views

UBUNTU-CVE-2026-40561

Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An...

5.3CVSS5.8AI score0.00433EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/05/03 12:57 a.m.•76 views

CVE-2026-40561 Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence

Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An...

0.00433EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/05/03 12:57 a.m.•44 views

EUVD-2026-26806

Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An...

5.8AI score0.00433EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/05/03 12:57 a.m.•7 views

CVE-2026-40561 Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence

Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An...

5.8AI score0.00433EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/05/03 12:57 a.m.•94 views

CVE-2026-40561

Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An...

5.3CVSS5.8AI score0.00433EPSS
SaveExploits0
attackerkb
attackerkb
•added 2026/05/03 12:57 a.m.•10 views

CVE-2026-40561

Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An...

5.8AI score0.00433EPSS
SaveExploits0References3
CVE
CVE
•added 2026/05/03 12:57 a.m.•58 views

CVE-2026-40561

The Starlet web framework for Perl (versions through 0.31 ) is vulnerable to HTTP Request Smuggling due to Improper Header Precedence . The software incorrectly prioritizes the Content-Length header over Transfer-Encoding: chunked when both are present, violating RFC 7230 3.3.3 . An attacker coul...

5.3CVSS5.8AI score0.00433EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2026/05/03 12:57 a.m.•17 views

CVE-2026-40561 Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence

Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An...

5.3CVSS6AI score
SaveExploits0References8
AlpineLinux
AlpineLinux
•added 2026/05/03 12:57 a.m.•118 views

CVE-2026-40561

Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An...

5.3CVSS5.8AI score0.00433EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/05/03 12:00 a.m.•19 views

Starlet 环境问题漏洞

Starlet is a high-performance HTTP/1.1 pre-fork web server developed by Kazuho Oku. Versions of Starlet prior to 0.31 contained an environmental vulnerability. This vulnerability stemmed from prioritizing the Content-Length header over the Transfer-Encoding header, which could lead to HTTP reques...

5.3CVSS5.8AI score0.00433EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/03 12:00 a.m.•2 views

CVE-2026-40561: Inconsistent Interpretation of HTTP Requests

Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when both headers are present in an HTTP request. Per RFC 7230 3.3.3, Transfer-Encoding must take precedence. An...

5.3CVSS5.8AI score0.00433EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/05/03 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-40561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starlet incorrectly prioritizes Content-Length over...

5.3CVSS5.7AI score0.00433EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/03 12:00 a.m.•38 views

PT-2026-36646

Name of the Vulnerable Software and Affected Versions Starlet versions prior to 0.32 Description Starlet for Perl allows HTTP Request Smuggling due to improper header precedence. The software incorrectly prioritizes the Content-Length header over Transfer-Encoding: chunked when both are present i...

5.3CVSS5.8AI score0.00433EPSS
SaveExploits0References14
OSV
OSV
•added 2004/12/31 5:00 a.m.•22 views

DEBIAN-CVE-2004-2160

Format string vulnerability in xmlelem.c for XMLStarlet Command Line XML Toolkit 0.9.3 may allow attackers to cause a denial of service or execute arbitrary code...

6.4CVSS7.5AI score0.01695EPSS
SaveExploits0References1
Rows per page
Query Builder