https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 31 Oct 2026 14:38:46 +0000 https://db.gcve.eu/vuln/cve-2026-117501 <p><strong>Affected:</strong> HTTP-Body</p> <p>HTTP::Body versions before 1.24_01 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies.</p> <p>In chunked mode, used when no content length is given, add() holds each chunk in memory until all of it has arrived. A line that is not a chunk-size line, a size line without CRLF, or a size too large to fit an integer leaves the parser waiting forever, and every later add() grows the buffer.</p> <p>A remote attacker can exhaust memory in applications that pass chunked request bodies to HTTP::Body.</p> <p><strong>Affected:</strong> HTTP-Body</p> <p>HTTP::Body versions before 1.24_01 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies.</p> <p>In chunked mode, used when no content length is given, add() holds each chunk in memory until all of it has arrived. A line that is not a chunk-size line, a size line without CRLF, or a size too large to fit an integer leaves the parser waiting forever, and every later add() grows the buffer.</p> <p>A remote attacker can exhaust memory in applications that pass chunked request bodies to HTTP::Body.</p> https://db.gcve.eu/vuln/cve-2026-117501