Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:http-Parser-Xs_project:http-Parser-Xs:*:*:*:*:*:perl:*:*

1 brief RSS
medium advisory

HTTP::Parser::XS: PATH_INFO truncation via encoded NUL byte (CVE-2026-116130)

HTTP::Parser::XS versions before 0.18 for Perl are vulnerable to PATH_INFO truncation when an encoded NUL byte is present in the request path, potentially enabling security bypasses in downstream applications.

HTTP::Parser::XS
1c