Log in Start free

RRWO

Products

ProductCVEsExploitedLatest
Net::CIDR::Set5–Aug 12, 2026
Net::Statsd::Lite2–May 18, 2026
Crypt::SaltedHash2–May 20, 2026
File::Rotate::Simple1–Aug 7, 2026
Linux::Statm::Tiny1–Apr 1, 2025
Mojolicious::Plugin::Statsd1–May 26, 2026
Net::Statsd::Tiny1–May 17, 2026
Plack::App::Prerender1–Jul 27, 2026
Plack::Middleware::Security::Common1–May 28, 2026
Plack::Middleware::Statsd1–May 10, 2026
Catalyst::Plugin::Statsd1–May 10, 2026
Text::Minify::XS1–Apr 27, 2026
Catalyst::View::Wkhtmltopdf1–Jul 25, 2026
Data::Entropy1–Aug 1, 2026

Exploited and recent CVEs

  • CVE-2026-19566 High 7.5 Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths 0.6%
  • CVE-2026-17435 Low 2.5 File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files 0.1%
  • CVE-2026-18536 High 7.5 Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP 0.2%
  • CVE-2026-17552 Critical 9.1 Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via unvalidated REQUEST_URI concatenation in call 0.5%
  • CVE-2026-16766 Critical 9.8 Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection (RCE) via PDF render options 2.6%
  • CVE-2026-49942 High 7.3 Net::CIDR::Set versions through 0.20 for Perl did not validate network masks 0.3%
  • CVE-2026-49941 High 7.5 Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses 0.3%
  • CVE-2026-49940 Medium 6.5 Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasks 0.2%
  • CVE-2026-9658 High 7.3 Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header injections in request paths 0.2%
  • CVE-2026-46740 Medium 5.3 Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections 0.3%
  • CVE-2026-47372 Critical 9.1 Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts 0.4%
  • CVE-2026-47373 High 7.5 Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks 0.4%
  • CVE-2026-8788 High 7.3 Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections 0.2%
  • CVE-2026-46720 High 8.2 Net::Statsd::Tiny versions before 0.3.8 for Perl allowed metric injections 0.3%
  • CVE-2026-46719 Medium 6.5 Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections 0.3%
  • CVE-2026-45180 High 7.5 Catalyst::Plugin::Statsd versions through 0.10.0 for Perl may leak session ids 0.2%
  • CVE-2026-45179 Medium 5.3 Plack::Middleware::Statsd versions before 0.9.0 for Perl may leak user IP addresses 0.2%
  • CVE-2026-7040 High 7.5 Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have heap overflow when processing some malformed UTF-8 characters 0.4%
  • CVE-2025-40911 Medium 6.5 Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses 0.4%
  • CVE-2025-3051 Medium 6.5 Linux::Statm::Tiny for Perl allows untrusted code to be included from the current working directory 0.4%