PerlDancer

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 22, 2026
Last mentionedSep 22, 2026

Timeline

2 articles · newest first

CVE-2026-93712: Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from outside public_dir via relative path segments in the File route handler

Dancer2 before 2.2.0 can serve files outside public_dir via relative path segments.

oss-securitySep 22, 01:17 UTC · Sep 22, 2026VulnerabilityCVE-2026-937121 · 1 read

CVE-2026-93711: Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headers_to_array

Dancer2 before 2.2.0 leaves CR and LF in response header names, enabling header injection.

oss-securitySep 22, 01:14 UTC · Sep 22, 2026Vulnerability 3 sourcesCVE-2026-937111 · 1 read

Related CVEs

by mentions

CVE-2026-937127.5
Unauthenticated RCE in Dancer2 2.1.0 before 2.2.0 for Perl
published Sep 22, 2026Dancer2 (Perl)
CVE-2026-937116.5
Unauthenticated Header Splitting in Dancer2 Perl Before 2.2.0
published Sep 22, 2026Dancer2 (Perl)

Appears with

PerlDancerorganization · 2
Dancer2product · 2

Entities are extracted by the model from each article. First seen Sep 22, 2026, last mentioned Sep 22, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.