Rrwo vulnerabilities

Products

• Net::cidr::set 5
• Net\ 3
• Crypt::saltedhash 2
• Net::statsd::lite 2

Newest

• rrwo net::cidr::set Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths CVE-2026-19566 Fix available 7.5 HighAugust 12, 2026
• rrwo file::rotate::simple File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files CVE-2026-17435 2.5 LowAugust 7, 2026
• rrwo data::entropy, data\ +1 more Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP CVE-2026-18536 7.5 HighAugust 1, 2026
• rrwo plack::app::prerender Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via unvalidated REQUEST_URI concatenation in call CVE-2026-17552 9.1 CriticalJuly 27, 2026
• rrwo catalyst::view::wkhtmltopdf Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection (RCE) via PDF render options CVE-2026-16766 9.8 CriticalJuly 25, 2026
• rrwo net::cidr::set, net\ +1 more Net::CIDR::Set versions through 0.20 for Perl did not validate network masks CVE-2026-49942 Fix available 7.3 HighJune 4, 2026
• rrwo net::cidr::set, net\ +1 more Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses CVE-2026-49941 Fix available 7.5 HighJune 3, 2026
• rrwo net::cidr::set, net\ +1 more Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasks CVE-2026-49940 Fix available 6.5 MediumJune 3, 2026
• rrwo plack::middleware::security::common Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header injections in request paths CVE-2026-9658 7.3 HighMay 28, 2026
• rrwo mojolicious::plugin::statsd Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections CVE-2026-46740 5.3 MediumMay 26, 2026
• rrwo crypt::saltedhash Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts CVE-2026-47372 Fix available 9.1 CriticalMay 20, 2026
• rrwo crypt::saltedhash Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks CVE-2026-47373 Fix available 7.5 HighMay 20, 2026
• rrwo net::statsd::lite Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections CVE-2026-8788 7.3 HighMay 18, 2026
• rrwo net::statsd::tiny Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections CVE-2026-46720 8.2 HighMay 17, 2026
• rrwo net::statsd::lite Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections CVE-2026-46719 6.5 MediumMay 16, 2026
• rrwo catalyst::plugin::statsd Catalyst::Plugin::Statsd versions through 0.10.0 for Perl may leak session ids CVE-2026-45180 7.5 HighMay 10, 2026
• rrwo plack::middleware::statsd Plack::Middleware::Statsd versions before 0.9.0 for Perl may leak user IP addresses CVE-2026-45179 5.3 MediumMay 10, 2026
• rrwo text::minify::xs, text\ +1 more Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have heap overflow when processing some malformed UTF-8 characters CVE-2026-7040 7.5 HighApril 27, 2026
• rrwo net::cidr::set Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on… CVE-2025-40911 Fix available 6.5 MediumMay 27, 2025
• rrwo linux::statm::tiny Linux::Statm::Tiny for Perl allows untrusted code to be included from the current working directory CVE-2025-3051 6.5 MediumApril 1, 2025