login
login
Home
CPANSec CVE announcements
Archive index November 2026
Thread Index - November 2026 - CPANSec CVE announcements
Search:
Search
« October
Archive index
By date
Refresh
December »
CVE-2026-13575: HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::CHI
Robert Rothenberg
(01 Nov 2026 10:49 UTC)
CVE-2026-74759: Google::Auth versions 0.12 for Perl allow server side request forgery via unvalidated credential_source URLs in AWS external account credentials
Robert Rothenberg
(01 Nov 2026 16:44 UTC)
CVE-2026-74760: Google::Auth versions from 0.11 through 0.12 for Perl accept an authorization code from any local process because the gcloud-auth login callback does not check the OAuth state
Robert Rothenberg
(01 Nov 2026 16:46 UTC)
CVE-2026-65059: Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses
Robert Rothenberg
(02 Nov 2026 17:02 UTC)
