CyberSecBulletin

HAARG vulnerabilities

We track 2 vulnerabilities in HAARG products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 13, 2026.

2vulnerabilities
1critical
1high
0exploited
8.4average CVSS score

Latest HAARG vulnerabilities

  • 9.8 Critical severity

    Storable: Integer Overflow or Wraparound

    CVE-2026-57433HAARG

    Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record. retrieve_hook_common reads a signed 32-bit item count from an SX_HOOK record and calls av_extend with that count plus one. A count of I32_MAX wra

  • 7.1 High severity

    HTTP::Tiny: Insufficiently Protected Credentials

    CVE-2026-7017HAARG

    HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets. When the server returns a 3xx redirect, `_maybe_redirect` follows the `Location:` header and `_prepare_headers_and_cb` re-merges the caller's `headers` argum