Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: OALDERS Clear all filters
TI-2026-12419 CVE-2026-14741 · GHSA-mcqf-9rr5-v7rw

Regular expression denial of service in OALDERS HTTP::Date

Priority MEDIUM 40

HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0063 Published 2026-07-17 Fixed in 6.08 CWE-1333
TI-2026-07753 CVE-2026-8829 · GHSA-9p7j-9995-m88w

Use after free in OALDERS HTML::Entities

Priority LOW 39

HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00408 Published 2026-06-04 Fixed in 3.84 CWE-416
TI-2026-07425 CVE-2026-8450 · GHSA-3hc6-3p33-wq57

OS command injection in OALDERS HTTP::Daemon

Priority MEDIUM 50

HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file().

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01398 Published 2026-05-27 Partial fix · 6.17 CWE-73
TI-2026-07568 CVE-2026-8612 · GHSA-38r9-g25v-vcvr

Deserialization of untrusted data in OALDERS WWW::Mechanize::Cached

Priority LOW 23

WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a world-writable on-disk cache, enabling local response forgery and code execution.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00127 Published 2026-05-15 Fixed in 2.00 CWE-502
TI-2026-07361 CVE-2026-8368 · GHSA-39wp-j2gg-h44j

Insufficiently protected credentials in OALDERS LWP::UserAgent

Priority LOW 28

LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00266 Published 2026-05-12 Partial fix · 6.83 CWE-522