Skip to content
Oalders vulnerabilities
Newest
-
oalders http::date
HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date
CVE-2026-14741
Fix available
7.5 High
-
oalders html::entities, html\ +1 more
HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities
CVE-2026-8829
Fix available
7.5 High
-
oalders http::daemon, red hat enterprise linux 10, enterprise linux 7 +2 more +4 more
HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file()
CVE-2026-8450
Fix available
9.1 Critical
-
oalders www::mechanize::cached, www\ +1 more
WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a world-writable on-disk cache, enabling local response forgery and code execution
CVE-2026-8612
Fix available
5.3 Medium
-
oalders lwp::useragent
LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects
CVE-2026-8368
Fix available
6.5 Medium