Skip to content
OpenAdvisories

Package · Debian

libwww-perl

3 known vulnerabilities.

3 results · Feed

  • Medium 6.5

    LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects

    LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects. On a 3xx response, the redirect handler strips only Host and Cookie before issuing the follow-up request. Caller-supplied Authorization …

  • Unscored —

    The Net::HTTPS module in libwww-perl (LWP) before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, …

  • Unscored —

    lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . (dot) character, wh…