CPAN - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/cpan/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 26 Oct 2026 02:22:20 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgPlack: HTTP::Server::PSGI denial of service via Content-Length header (CVE-2026-115825)https://feed.craftedsignal.io/briefs/2026-10-cve-2026-115825-plack/Mon, 26 Oct 2026 02:22:20 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-cve-2026-115825-plack/HTTP::Server::PSGI versions before 1.0056 are susceptible to a remote denial-of-service vulnerability triggered by an excessively large Content-Length header.Plack versions prior to 1.0056 contain a vulnerability in the HTTP::Server::PSGI component (CVE-2026-115825). A remote attacker can crash the server by sending a single HTTP request with an excessively large Content-Length header, which leads to resource exhaustion and service unavailability.

Impact

The vulnerability allows an unauthenticated attacker to cause a denial-of-service by crashing the server process.

Recommendation

Update the Plack distribution to version 1.0056 or later to mitigate the vulnerability.

]]>mediumadvisorydenial-of-servicewebservervulnerability