VYPR

HTTP::Server::PSGI

by Perl Foundation

CVEs (1)

  • CVE-2026-115825Oct 25, 2026
    risk 0.00cvss —epss —

    HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length. The request body is read with sysread() calls sized by the remaining Content-Length. Perl grows the read buffer to the requested length before any…