Skip to content
OpenAdvisories

Vendor

OALDERS

5 known vulnerabilities.

Products

HTTP::Daemon 1 WWW::Mechanize::Cached 1 HTML::Entities 1 LWP::UserAgent 1 HTTP::Date 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-14741

    HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date

    HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date. parse_date() matches the date string against a chain of alternative regexes, and str2time() delegates to it. Several of these patterns place unbound…

    OALDERS HTTP::Date libhttp-date-perl libhttp-date-perl Debian Ubuntu
  • High 7.5
    CVE-2026-8829

    HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities

    HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities. The XS routine backing HTML::Entities::_decode_entities cached a pointer (repl) into the entity-value SV returned by hv_fetch on the entity2char hash. When the input SV w…

    OALDERS HTML::Entities libhtml-parser-perl libhtml-parser-perl Debian Ubuntu Azure Linux