{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/robots-validate-0.4.3-0.4.9/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"id":"CVE-2026-112921"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Robots-Validate (0.4.3-0.4.9)"],"_cs_severities":["low"],"_cs_tags":["vulnerability","perl","software-bug","informational"],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eThe Robots-Validate Perl module, specifically versions 0.4.3 through 0.4.9, contains a flaw where the internal state of the User-Agent matcher persists across consecutive requests. This leakage can result in false positive identifications of legitimate clients as imposter robots. The issue is resolved in version 0.4.10.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability may cause unexpected denial of service or access rejection for legitimate web clients when using the affected module for request validation.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAudit systems for usage of the Robots-Validate Perl module.\u003c/li\u003e\n\u003cli\u003eUpgrade the Robots-Validate module to version 0.4.10 or later.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-22T01:36:26Z","date_published":"2026-10-22T01:36:26Z","id":"https://feed.craftedsignal.io/briefs/2026-10-robots-validate-state-leak/","summary":"The Robots-Validate Perl module (versions 0.4.3 through 0.4.9) fails to clear User-Agent matcher state between requests, causing legitimate clients to be incorrectly classified as imposter robots.","title":"Robots-Validate: User-Agent matcher state leakage (CVE-2026-112921)","url":"https://feed.craftedsignal.io/briefs/2026-10-robots-validate-state-leak/"}],"language":"en","title":"CraftedSignal Threat Feed - Robots-Validate (0.4.3-0.4.9)","version":"https://jsonfeed.org/version/1.1"}