https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 08 Nov 2026 07:25:27 +0000 https://db.gcve.eu/vuln/cve-2026-116133 <p><strong>Affected:</strong> HTTP-Body</p> <p>HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a missing or malformed boundary.</p> <p>Before the first part, and between parts, the multipart parser searches the whole buffered body for the next boundary. On a miss it keeps everything and searches again from the start when the next chunk arrives. A body with no boundary, or with a delimiter followed by neither CRLF nor &#34;--&#34;, is therefore rescanned on every chunk, taking time quadratic in its size.</p> <p>A remote attacker can exhaust worker CPU with a few such requests.</p> <p><strong>Affected:</strong> HTTP-Body</p> <p>HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a missing or malformed boundary.</p> <p>Before the first part, and between parts, the multipart parser searches the whole buffered body for the next boundary. On a miss it keeps everything and searches again from the start when the next chunk arrives. A body with no boundary, or with a delimiter followed by neither CRLF nor &#34;--&#34;, is therefore rescanned on every chunk, taking time quadratic in its size.</p> <p>A remote attacker can exhaust worker CPU with a few such requests.</p> https://db.gcve.eu/vuln/cve-2026-116133