HTTP::Tiny vulnerabilities

1 known vulnerability in HTTP::Tiny from HAARG. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  HTTP::Tiny: Insufficiently Protected Credentials

  CVE-2026-7017Jul 7, 2026HAARG

  HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets. When the server returns a 3xx redirect, `_maybe_redirect` follows the `Location:` header and `_prepare_headers_and_cb` re-merges the caller's `headers` argum