Product
Multiple vulnerabilities in the Perl CGI module library, including versions prior to 5.00, facilitate denial-of-service and CPU exhaustion via regex backtracking and allow host header injection through untrusted X-Forwarded-Host headers.