Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: HAARG Clear all filters
TI-2026-06141 CVE-2026-7017 · GHSA-pgc4-5jjm-7rr7

Insufficiently protected credentials in HAARG HTTP::Tiny

Priority LOW 31

HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00349 Published 2026-07-07 Fixed in 0.095 CWE-522
TI-2026-06134 CVE-2026-7010 · GHSA-x3qr-8f53-fg74

HTTP response splitting in HAARG HTTP::Tiny

Priority LOW 34

HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00227 Published 2026-05-11 Fixed in 0.093 CWE-113