HAARG
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| HTTP::Tiny | 2 | – | Jul 7, 2026 |
| Catalyst::Plugin::Session | 1 | – | Jul 17, 2025 |
| Storable | 1 | – | Jul 13, 2026 |
Exploited and recent CVEs
- CVE-2026-57433 Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record 0.5%
- CVE-2026-7017 HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets 0.3%
- CVE-2026-7010 HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values 0.2%
- CVE-2025-40924 Catalyst::Plugin::Session before version 0.44 for Perl generates session ids insecurely 0.3%