Posted by Robert Rothenberg on Nov 01 CVE-2026-13575 CPAN Security Group CVE ID: CVE-2026-13575 Distribution: http-session Versions: before 0.54 MetaCPAN: https://metacpan.org/dist/http-session VCS Repo: ...
CVE-2026-13575: HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::CHI
About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/461
Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Apache Wicket: 19 CVEs fixed in 8.20.0, 9.25.0 and 10.12.0
Posted by Emond Papegaaij on Nov 01 On 1 November the Apache Wicket PMC published 19 security advisories. All of the issues are fixed in Apache Wicket 8.20.0, 9.25.0 and…
Google::Auth for Perl (2 CVEs)
Posted by Robert Rothenberg on Nov 01 CVE-2026-74759 Google::Auth versions 0.12 for Perl allow server side request forgery via unvalidated credential_source URLs in AWS…
Alpine Linux rebuilds GitLab after attempted RCE attack
Hackers attempted to exploit a critical GitLab vulnerability in Alpine Linux's development infrastructure on October 20-21, prompting the open-source project to rebuild…
Week in review: Binance hit by $6.3 billion theft, impact of Brotli vulnerability
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: r/opensource bans AI projects, and solo devs go down with them…
CVE-2026-115946: XS::ibbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder
Posted by Timothy Legge on Oct 31 CVE-2026-115946 CPAN Security Group CVE ID: CVE-2026-115946 Distribution: XS-libbrotli Versions: before 1.2.1.0 MetaCPAN…
CVE-2026-98432: init_on_free=1 as an additional interim mitigation
Posted by Rui Sousa on Oct 31 Hello, An additional hardening option for CVE-2026-98432 (the IPv4 TCP inet_opt use-after-free), for systems that cannot take a fixed…