Skip to content
OpenAdvisories
Critical RHSA-2026:99213 3 CVEs

Red Hat Security Advisory: perl-CGI security update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · RHEL 9.8 EUS rhel_eus:9.8::appstream perl-CGI 0:4.51-5.el9_8.1

Vulnerabilities 3

  • Critical 9.1
    CVE-2026-120642

    CGI versions before 5.00 for Perl return request-derived values untainted under taint mode

    CGI versions before 5.00 for Perl return request-derived values untainted under taint mode. The upload filename, uploadInfo values, some path_info and script_name values, Accept results, and the name lists from url_param and cookie are returned without the ta…

    libcgi-pm-perl libcgi-pm-perl perl-CGI Debian Ubuntu Azure Linux
  • High 8.8
    CVE-2026-120641

    CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows paths

    CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows paths. The name returned for an uploaded file is the filename parameter of the part's Content-Disposition header, unchanged. An application that…

    libcgi-pm-perl libcgi-pm-perl perl-CGI Debian Ubuntu Azure Linux
  • Medium 6.5
    CVE-2026-120650

    CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or unenforced request size, parameter and upload limits

    CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or unenforced request size, parameter and upload limits. $CGI::POST_MAX defaults to no limit, and when set is not enforced for chunked multipart bodies or for the boundary lin…

    libcgi-pm-perl libcgi-pm-perl perl-CGI Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2566595
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2566598
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2566605
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_99213.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-120641
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-120641
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-120641
  • article
    https://github.com/leejo/CGI.pm/commit/5379eb18e87b7f985613f5c4f7bae94478a4fa2f.patch
  • article
    https://metacpan.org/release/LEEJO/CGI-4.72/source/lib/CGI.pm
  • article
    https://metacpan.org/release/LEEJO/CGI-5.00/changes
  • report
    https://access.redhat.com/security/cve/CVE-2026-120642
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-120642
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-120642
  • article
    https://github.com/leejo/CGI.pm/commit/6ae50ce84073b8f68a6e3750479de70d5b8f2dcf.patch
  • report
    https://access.redhat.com/security/cve/CVE-2026-120650
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-120650
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-120650
  • article
    https://github.com/leejo/CGI.pm/commit/17b838dc14d2b82ae6c7e76f66ec2c3f3b08038b.patch
  • article
    https://github.com/leejo/CGI.pm/commit/277baeb74fde7bce975a7bd0a1f98dcf1b9b2050.patch
  • article
    https://github.com/leejo/CGI.pm/commit/8940a74e53a41563f72813b45f99cceaaa4c92e8.patch
  • article
    https://github.com/leejo/CGI.pm/commit/f3febefe63fe3881d8c3ae10fa83ca8ec950b959.patch