Skip to content
Threat Feed
Subscribe

Product

HTTP::Parser::XS (< 0.18)

1 brief RSS
medium advisory

HTTP::Parser::XS: PATH_INFO truncation via encoded NUL byte (CVE-2026-116130)

HTTP::Parser::XS versions before 0.18 for Perl are vulnerable to PATH_INFO truncation when an encoded NUL byte is present in the request path, potentially enabling security bypasses in downstream applications.

HTTP::Parser::XS
1c