EUVD-2026-53319

Pixelfed's SearchController behind the auth middleware accepts a URL via its remote-search parameters and fetches it server-side through ActivityPubFetchService, whose validateUrl only blocks the literal hosts 127.0.0.1, localhost, and ::1 and requires https, without checking the resolved IP...

EUVD-2021-34770

Net::CIDR versions before 0.24 for Perl mishandle leading zeros in IP CIDR addresses, which may have unspecified impact. The functions addr2cidr and cidrlookup may return leading zeros in a CIDR string, which may in turn be parsed as octal numbers by subsequent users. In some cases an attacker ma...

CVE-2021-4456

Net::CIDR versions before 0.24 for Perl mishandle leading zeros in IP CIDR addresses, which may have unspecified impact. The functions addr2cidr and cidrlookup may return leading zeros in a CIDR string, which may in turn be parsed as octal numbers by subsequent users. In some cases an attacker ma...

CVE-2021-4456

The Net::CIDR Perl module versions prior to 0.24 are vulnerable to improper handling of leading zeros in IP CIDR addresses. Specifically, the addr2cidr and cidrlookup functions may return strings with leading zeros, which subsequent processes might incorrectly parse as octal numbers . This flaw c...

PT-2026-22248

Name of the Vulnerable Software and Affected Versions Net::CIDR versions prior to 0.24 Description The software mishandles leading zeros in IP CIDR addresses, potentially leading to an unspecified impact. The addr2cidr and cidrlookup functions can return leading zeros within a CIDR string, which...