CVE-2026-65059: Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses

As cited

Copy frozen at 2026-11-02 20:41 UTC (site build).

vulnerabilities

CVE-2026-65059: Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses

CVE-2026-65059 affects Furl versions through 3.15 for Perl, a module for HTTP client operations. The vulnerability allows memory exhaustion through unbounded decompression of HTTP responses, potentially leading to denial of service conditions.

Why it matters: Perl developers using Furl for HTTP requests should upgrade immediately, as attackers can exhaust memory by sending specially crafted compressed responses, causing application crashes or unavailability.

Source published

2026-11-02 17:32 UTC

First seen by Cybersecurity Tracker

2026-11-02 20:00 UTC