CVE-2026-65059

Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflates a response body sent with a gzip, x-gzip or deflate Content-Encoding and appends the output to the response string with no size limit. It does this whether or not the request...

EUVD-2026-115332

Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflates a response body sent with a gzip, x-gzip or deflate Content-Encoding and appends the output to the response string with no size limit. It does this whether or not the request...

CVE-2026-65059

Versions through 3.15 of the Furl library for Perl are vulnerable to memory exhaustion due to the unbounded decompression of HTTP responses. The affected component inflates response bodies using gzip , x-gzip , or deflate Content-Encoding and appends the output to the response string without a si...

CVE-2026-65059 Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses

Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflates a response body sent with a gzip, x-gzip or deflate Content-Encoding and appends the output to the response string with no size limit. It does this whether or not the request...

CVE-2026-65059: Improper Handling of Highly Compressed Data

Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflates a response body sent with a gzip, x-gzip or deflate Content-Encoding and appends the output to the response string with no size limit. It does this whether or not the request...