https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-09T01:08:08.585307+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-120646 CVE-2026-120646 — CGI versions from 4.71 before 5.00 for Perl allow denial of service via a plain string dereferenced as a symbolic refer… 2026-11-09T01:08:08.586254+00:00

Affected: CGI

CGI versions from 4.71 before 5.00 for Perl allow denial of service via a plain string dereferenced as a symbolic reference in uploadInfo.

uploadInfo dereferences its argument and calls its filename method without checking that it is an upload filehandle. A plain string naming a defined global variable, such as the parameter value from ?upload=0, is treated as a symbolic reference, and the method call on it dies.