Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-117500 | not reported | — | No | HTTP::Body versions before 1.24_01 for Perl allow CPU exhaustion via regex backtracking on the filename of a multipart upload. For every fi... | 2026-10-29 |
| CVE-2026-116531 | not reported | — | No | HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk. In ch... | 2026-10-29 |
| CVE-2026-116285 | not reported | — | No | HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies. In c... | 2026-10-29 |
| CVE-2026-116273 | not reported | — | No | MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion. The max_par... | 2026-10-29 |
| CVE-2026-116272 | not reported | — | No | MIME::Field::ParamVal versions before 5.521 for Perl do not flag a duplicate boundary parameter whose name contains a nested comment. A par... | 2026-10-29 |
| CVE-2026-116271 | not reported | — | No | MIME::Parser::FileUnder versions before 5.521 for Perl reuse a pre-created output directory and follow symlinks in it, letting local users r... | 2026-10-29 |
| CVE-2026-116270 | not reported | — | No | MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decode_mimewords. For each "=?" that does... | 2026-10-29 |
| CVE-2026-116269 | not reported | — | No | MIME::Field::ParamVal versions before 5.521 for Perl turn an RFC 2231 filename with a hyphenated language tag into an empty recommended file... | 2026-10-29 |
| CVE-2026-116268 | not reported | — | No | MIME::Field::ParamVal versions before 5.521 for Perl allow CPU exhaustion via unclosed comments in header parameters. The comment pattern u... | 2026-10-29 |
| CVE-2026-116267 | not reported | — | No | MIME::Parser versions before 5.521 for Perl allow memory exhaustion via indented error messages from a truncated, deeply nested message. Ea... | 2026-10-29 |
| CVE-2026-116266 | not reported | — | No | MIME::Head versions from 5.518 before 5.521 for Perl decode a partly encoded multipart boundary without flagging the parse as ambiguous. Th... | 2026-10-29 |
| CVE-2026-116265 | not reported | — | No | MIME::Field::ParamVal versions before 5.521 for Perl do not flag an ambiguous multipart boundary written as RFC 2231 continuations. The bou... | 2026-10-29 |
| CVE-2026-116264 | not reported | — | No | MIME::Field::ParamVal versions before 5.521 for Perl allow one invalid Content-Type parameter to hide the parameters after it, including the... | 2026-10-29 |
| CVE-2026-116135 | not reported | — | No | HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decoding them. The decod... | 2026-10-29 |
| CVE-2026-116134 | not reported | — | No | HTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header block. The multipart parser take... | 2026-10-29 |
| CVE-2026-116133 | not reported | — | No | HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a missing or malformed bo... | 2026-10-29 |
| CVE-2026-116132 | not reported | — | No | HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on disk. The multipart parser create... | 2026-10-29 |
| CVE-2026-116131 | not reported | — | No | HTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart... | 2026-10-29 |
| CVE-2026-118255 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid applies credits.href to the credits lin... | 2026-10-29 |
| CVE-2026-118254 | not reported | — | No | Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid writes pagination language strings into... | 2026-10-29 |