Skip to content
OpenAdvisories

Package · Debian

libdancer2-perl

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-93711

    Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headers_to_array

    Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headers_to_array. The routine removes CR and LF from each header value but not from the name. A name carrying them therefore reaches the PSGI server intact. A server t…

    libdancer2-perl libdancer2-perl Debian Ubuntu
  • Medium 5.3
    CVE-2026-93709

    Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler

    Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler. The handler compares the request path against the layout directory name as text, while the lookup that follows ca…

    libdancer2-perl libdancer2-perl Debian Ubuntu