https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 26 Oct 2026 18:11:18 +0000 https://db.gcve.eu/vuln/cve-2026-112921 <p><strong>Affected:</strong> Robots-Validate</p> <p>Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as imposter robots when User-Agent matcher state carries over from a previous request.</p> <p>Each Robots::Validate object holds one pure-Perl Aho-Corasick search machine and feeds every User-Agent into it without resetting its state. A User-Agent that ends part-way through a robot name leaves the machine mid-match, so the next User-Agent checked by the same object can complete that name. That client&#39;s address is then checked against the robot&#39;s DNS rule, which it fails.</p> <p>A remote client can use this to make a site that blocks bad robots block other visitors where the prefix User-Agent string is a suffix of a robot being validated.</p> <p>Note that deployments with Algorithm::AhoCorasick::XS are also affected, since it was unused due to a different bug.</p> <p><strong>Affected:</strong> Robots-Validate</p> <p>Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as imposter robots when User-Agent matcher state carries over from a previous request.</p> <p>Each Robots::Validate object holds one pure-Perl Aho-Corasick search machine and feeds every User-Agent into it without resetting its state. A User-Agent that ends part-way through a robot name leaves the machine mid-match, so the next User-Agent checked by the same object can complete that name. That client&#39;s address is then checked against the robot&#39;s DNS rule, which it fails.</p> <p>A remote client can use this to make a site that blocks bad robots block other visitors where the prefix User-Agent string is a suffix of a robot being validated.</p> <p>Note that deployments with Algorithm::AhoCorasick::XS are also affected, since it was unused due to a different bug.</p> https://db.gcve.eu/vuln/cve-2026-112921