https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 09 Nov 2026 00:19:34 +0000 https://db.gcve.eu/vuln/cve-2026-120638 <p><strong>Affected:</strong> CGI</p> <p>CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application validation in redirect.</p> <p>redirect decodes HTML entities in its URL before writing the Location header, so a URL the application has already validated can change meaning. For example, /&amp;#47;evil.example/ becomes //evil.example/ and sends the user to another host.</p> <p><strong>Affected:</strong> CGI</p> <p>CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application validation in redirect.</p> <p>redirect decodes HTML entities in its URL before writing the Location header, so a URL the application has already validated can change meaning. For example, /&amp;#47;evil.example/ becomes //evil.example/ and sends the user to another host.</p> https://db.gcve.eu/vuln/cve-2026-120638