VYPR

HTTP-Date

by Libwww Perl

Source repositories

CVEs (1)

  • CVE-2026-14741HigJul 17, 2026
    risk 0.42cvss 7.5epss 0.00

    HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date. parse_date() matches the date string against a chain of alternative regexes, and str2time() delegates to it. Several of these patterns place unbounded quantifiers next…