cpan HTTP-Headers-ActionPack vulnerabilities

Latest cpan HTTP-Headers-ActionPack CVEs

Newest publication first

1. CVE-2026-113877 HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions

   Published 2026-10-23

   High·CVSS 7.5 EPSS 0.71%

   HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions. _language_match interpolates each Accept-Language range into the pattern /^$range\-/i without escaping it, so regular expression syntax in the h...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.