VYPR

Furl

by Perl Foundation

CVEs (1)

  • CVE-2026-65059Nov 2, 2026
    risk 0.00cvss —epss —

    Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflates a response body sent with a gzip, x-gzip or deflate Content-Encoding and appends the output to the response string with no size limit. It does this whether…