CVE-2026-114629: Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters

As cited

Copy frozen at 2026-10-24 16:43 UTC (site build).

vulnerabilities

CVE-2026-114629: Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters

Web::Simple, a Perl web framework, versions before 0.035 allocate a buffer based on the Content-Length header when processing urlencoded body parameters, creating a potential memory exhaustion vulnerability. An attacker can exploit this by sending requests with inflated Content-Length values to consume excessive memory.

Why it matters: Developers and operators running Web::Simple applications should upgrade to version 0.035 or later to prevent denial of service attacks via malicious Content-Length headers.

Source published

2026-10-24 13:56 UTC

First seen by Cybersecurity Tracker

2026-10-24 16:02 UTC