OALDERS

Products

ProductCVEsExploitedLatest
HTML::Entities1–Jun 4, 2026
HTTP::Daemon1–May 27, 2026
HTTP::Date1–Jul 17, 2026
LWP::UserAgent1–May 12, 2026
WWW::Mechanize::Cached1–May 15, 2026

Exploited and recent CVEs

  • CVE-2026-14741 High 7.5 HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date 0.6%
  • CVE-2026-8829 High 7.5 HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities 0.4%
  • CVE-2026-8450 Critical 9.1 HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file() 1.4%
  • CVE-2026-8612 Medium 5.3 WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a world-writable on-disk cache, enabling local response forgery and code execution 0.1%
  • CVE-2026-8368 Medium 6.5 LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects 0.3%