NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#plack

2 stories this week · 2 this month · 2 in 6 months · mostly security

Stories per day · 30 days

Relatedperl2 denial-of-service1 etag1 http1 information-disclosure1 psgi1

2 stories, newest first · one card per story

oss-security4h ago

HTTP::Server::PSGI before 1.0056 crashes on large Content-Length

One request that declares a large Content-Length can crash the PSGI server; 1.0056 is the fixed release.

oss-security6d ago

Plack::Middleware::ETag before 0.06 leaks inodes (CVE-2026-111946)

Default ETag headers in versions from 0.04 before 0.06 reveal file inode numbers.