Web::Simple before 0.035 sizes a buffer from Content-Length (CVE-2026-114629)
Original title: CVE-2026-114629: Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters
Robert Rothenberg posted the Perl module issue on October 24; the snippet does not mention attacks.
Web::Simple versions before 0.035 allocate a buffer for urlencoded body parameters using the size in the Content-Length header. Robert Rothenberg reported CVE-2026-114629 to oss-security on October 24 and pointed to the MetaCPAN distribution. The available snippet does not describe exploitation or a workaround beyond that version boundary.
Unconfirmed: The snippet does not state whether the issue is exploitable beyond excessive allocation or whether attacks exist.
- The flaw is in handling urlencoded body parameters.
- The report links to the Web-Simple distribution on MetaCPAN.
- Only a feed snippet of the oss-security post is available.
Impact: Memory allocation driven by an untrusted Content-Length value
| Product | Affected | Fixed in |
|---|---|---|
| Web::Simple | before 0.035 | 0.035 |
- 1.Upgrade Web::Simple to 0.035 or later.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-114629 | Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters | — | — |
From the original article
Posted by Robert Rothenberg on Oct 24 ======================================================================== https://metacpan. org/dist/Web-Simple VCS Repo: ...
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.