OALDERS vulnerabilities

HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date

OALDERS · HTTP::Date

HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities

OALDERS · HTML::Entities

HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file()

OALDERS · HTTP::Daemon

WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a world-writable on-disk cache, enabling local response forgery and code execution

OALDERS · WWW::Mechanize::Cached

LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects

OALDERS · LWP::UserAgent