https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 14:03:59 +0000 https://vulnerability.circl.lu/vuln/cve-2026-7010 <p><strong>Affected:</strong> HAARG HTTP::Tiny</p> <p>HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values.</p> <p>The unvalidated inputs are the method and URI in the request line, the URL host that becomes the `Host:` header, and HTTP/1.1 control data field values.</p> <p>An attacker who controls one of these inputs, for example a user supplied URL passed to a webhook or URL fetch endpoint, can inject additional headers and smuggle requests to the upstream server.</p> <p><strong>Affected:</strong> HAARG HTTP::Tiny</p> <p>HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values.</p> <p>The unvalidated inputs are the method and URI in the request line, the URL host that becomes the `Host:` header, and HTTP/1.1 control data field values.</p> <p>An attacker who controls one of these inputs, for example a user supplied URL passed to a webhook or URL fetch endpoint, can inject additional headers and smuggle requests to the upstream server.</p> https://vulnerability.circl.lu/vuln/cve-2026-7010