NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#nul-byte

1 stories this week · 3 this month · 3 in 6 months · mostly security

Stories per day · 30 days

Relatedapache2 log4net2 logging2 cve-2026-1052391 cve-2026-1052401 event-log1 http-parser1 integrity1 path-info1 perl1

2 stories, newest first · one card per story

oss-security12h ago

HTTP::Parser::XS before 0.18 truncates PATH_INFO at encoded NUL

parse_http_request in the Perl module stops PATH_INFO at an encoded NUL byte; 0.18 is the fixed release.

perl http-parser

oss-security23d ago

CVE-2026-105239: Apache log4net: NUL character truncates EventLogAppender records

Apache log4net CVE-2026-105239 lets a NUL byte truncate Windows Event Log records written by EventLogAppender.

6 sources apache log4net

2