CVE-2026-93710: Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying hook refused when the exception handler halts the response in compile_hooks

As cited

Copy frozen at 2026-09-22 04:44 UTC (site build).

vulnerabilities

CVE-2026-93710: Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying hook refused when the exception handler halts the response in compile_hooks

A vulnerability in Dancer2 versions 2.0.0 through 2.1.x allows route dispatch to continue after a dying hook is refused when the exception handler halts the response in compile_hooks. This logic error can cause unexpected behavior in request handling.

Why it matters: Developers using Dancer2 for Perl web applications should upgrade to version 2.2.0 or later to prevent potential logic bypass in route handling.

Source published

2026-09-22 01:12 UTC

First seen by Cybersecurity Tracker

2026-09-22 03:13 UTC