TI-2026-06134 CVE-2026-7010 · GHSA-x3qr-8f53-fg74
HTTP response splitting in HAARG HTTP::Tiny
Priority LOW 34
HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values.
No HAARG vulnerabilities are listed in CISA KEV.
3 records
HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values.
HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets.
Catalyst::Plugin::Session before version 0.44 for Perl generates session ids insecurely.