Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 08 Nov 2026 23:40:24 +0000 fkie_cve-2026-120638 https://db.gcve.eu/vuln/fkie_cve-2026-120638 <p>CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application validation in redirect.</p> <p>redirect decodes HTML entities in its URL before writing the Location header, so a URL the application has already validated can change meaning. For example, /&amp;#47;evil.example/ becomes //evil.example/ and sends the user to another host.</p> <p>CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application validation in redirect.</p> <p>redirect decodes HTML entities in its URL before writing the Location header, so a URL the application has already validated can change meaning. For example, /&amp;#47;evil.example/ becomes //evil.example/ and sends the user to another host.</p> https://db.gcve.eu/vuln/fkie_cve-2026-120638 GHSA-33j8-q94p-w495 https://db.gcve.eu/vuln/ghsa-33j8-q94p-w495 <p>CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application validation in redirect.</p> <p>redirect decodes HTML entities in its URL before writing the Location header, so a URL the application has already validated can change meaning. For example, /&amp;#47;evil.example/ becomes //evil.example/ and sends the user to another host.</p> <p>CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application validation in redirect.</p> <p>redirect decodes HTML entities in its URL before writing the Location header, so a URL the application has already validated can change meaning. For example, /&amp;#47;evil.example/ becomes //evil.example/ and sends the user to another host.</p> https://db.gcve.eu/vuln/ghsa-33j8-q94p-w495 msrc_CVE-2026-120638 — CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application validation… https://db.gcve.eu/vuln/msrc_cve-2026-120638 msrc_CVE-2026-120638 https://db.gcve.eu/vuln/msrc_cve-2026-120638 openSUSE-SU-2026:12465-1 — perl-CGI-5.20.0-1.1 on GA media https://db.gcve.eu/vuln/opensuse-su-2026:12465-1 <p>perl-CGI-5.20.0-1.1 on GA media</p> <p>perl-CGI-5.20.0-1.1 on GA media</p> https://db.gcve.eu/vuln/opensuse-su-2026:12465-1 UBUNTU-CVE-2026-120638 https://db.gcve.eu/vuln/ubuntu-cve-2026-120638 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libcgi-pm-perl, Ubuntu:18.04:LTS: libcgi-pm-perl, Ubuntu:20.04:LTS: libcgi-pm-perl, Ubuntu:22.04:LTS: libcgi-pm-perl, Ubuntu:24.04:LTS: libcgi-pm-perl, Ubuntu:26.10: libcgi-pm-perl, Ubuntu:26.04:LTS: libcgi-pm-perl</p> <p>CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application validation in redirect. redirect decodes HTML entities in its URL before writing the Location header, so a URL the application has already validated can change meaning. For example, /&amp;#47;evil.example/ becomes //evil.example/ and sends the user to another host.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libcgi-pm-perl, Ubuntu:18.04:LTS: libcgi-pm-perl, Ubuntu:20.04:LTS: libcgi-pm-perl, Ubuntu:22.04:LTS: libcgi-pm-perl, Ubuntu:24.04:LTS: libcgi-pm-perl, Ubuntu:26.10: libcgi-pm-perl, Ubuntu:26.04:LTS: libcgi-pm-perl</p> <p>CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application validation in redirect. redirect decodes HTML entities in its URL before writing the Location header, so a URL the application has already validated can change meaning. For example, /&amp;#47;evil.example/ becomes //evil.example/ and sends the user to another host.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-120638