login
login
Home
CPANSec CVE announcements
Archive index November 2026
Date Index - November 2026 - CPANSec CVE announcements
Search:
Search
« October
Archive index
By threads
Refresh
December »
01 Nov 2026 10:49 UTC
CVE-2026-13575: HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::CHI
Robert Rothenberg
01 Nov 2026 16:44 UTC
CVE-2026-74759: Google::Auth versions 0.12 for Perl allow server side request forgery via unvalidated credential_source URLs in AWS external account credentials
Robert Rothenberg
01 Nov 2026 16:46 UTC
CVE-2026-74760: Google::Auth versions from 0.11 through 0.12 for Perl accept an authorization code from any local process because the gcloud-auth login callback does not check the OAuth state
Robert Rothenberg
02 Nov 2026 17:02 UTC
CVE-2026-65059: Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses
Robert Rothenberg
