https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 08 Nov 2026 23:10:58 +0000 https://db.gcve.eu/vuln/cve-2026-120631 <p><strong>Affected:</strong> CGI</p> <p>CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via the client cookie expires value used as a regex in parse.</p> <p>CGI&#39;s cookie method reads the Cookie request header through parse, which interpolates the header&#39;s expires value unescaped into the substitution pattern that removes it from the cookie string.</p> <p>A client can make the request die with an invalid pattern, or tie up the process with one that backtracks catastrophically.</p> <p><strong>Affected:</strong> CGI</p> <p>CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via the client cookie expires value used as a regex in parse.</p> <p>CGI&#39;s cookie method reads the Cookie request header through parse, which interpolates the header&#39;s expires value unescaped into the substitution pattern that removes it from the cookie string.</p> <p>A client can make the request die with an invalid pattern, or tie up the process with one that backtracks catastrophically.</p> https://db.gcve.eu/vuln/cve-2026-120631