CGI versions before 5.00 for Perl (20 CVEs)
20 CVEs in CGI and CGI::Cookie for Perl before 5.00 allow denial of service, CPU exhaustion and header spoofing.
Stories per day · 30 days
2 RSS
3 stories, newest first · one card per story
Stories tagged #cpu-exhaustion
DateTime::Lite before 0.8.1 allows CPU exhaustion (CVE-2026-87768)
Adding seconds can trigger a per-day loop in the Perl module; 0.8.1 is the fixed version named in the notice.
CVE-2026-87079: Net::IDN::Punycode versions before 2.590 for Perl allow CPU exhaustion via quadratic insertion cost when decoding a long label in decode_punycode
Perl Net::IDN::Punycode before 2.590 can exhaust CPU decoding a long Punycode label.