Skip to content
OpenAdvisories

Vendor

OALDERS

5 known vulnerabilities.

OALDERS at a glance

Last 12 months
5
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 3 vulnerabilities, 1 critical June 2026: 1 vulnerability Jun July 2026: 1 vulnerability August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202610
Jun 202610
May 202631
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

HTTP::Daemon 1 WWW::Mechanize::Cached 1 HTML::Entities 1 LWP::UserAgent 1 HTTP::Date 1
All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • High 7.5
    CVE-2026-14741

    HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date

    HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date. parse_date() matches the date string against a chain of alternative regexes, and str2time() delegates to it. Several of these patterns place unbound…

    OALDERS HTTP::Date libhttp-date-perl libhttp-date-perl Debian Ubuntu
  • High 7.5
    CVE-2026-8829

    HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities

    HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities. The XS routine backing HTML::Entities::_decode_entities cached a pointer (repl) into the entity-value SV returned by hv_fetch on the entity2char hash. When the input SV w…

    OALDERS HTML::Entities libhtml-parser-perl libhtml-parser-perl Debian Ubuntu Azure Linux
  • Critical 9.1
    CVE-2026-8450

    HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file()

    HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file(). send_file() opens its string argument with Perl's 2-arg open(). The 2-arg form interprets magic prefixes: '| cmd' and 'cmd |' open a pipe to a subprocess, '> path' and '>> …

    OALDERS HTTP::Daemon libhttp-daemon-perl libhttp-daemon-perl Debian Ubuntu Azure Linux
  • Medium 5.3
    CVE-2026-8612

    WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a world-writable on-disk cache, enabling local response forgery and code execution

    WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a world-writable on-disk cache, enabling local response forgery and code execution. With no explicit cache backend, WWW::Mechanize::Cached constructs a default Cache::…

    OALDERS WWW::Mechanize::Cached perl-www-mechanize-cached Alpine
  • Medium 6.5
    CVE-2026-8368

    LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects

    LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects. On a 3xx response, the redirect handler strips only Host and Cookie before issuing the follow-up request. Caller-supplied Authorization …

    OALDERS LWP::UserAgent libwww-perl libwww-perl Debian Ubuntu Azure Linux