HTTP::Date vulnerabilities

1 known vulnerability in HTTP::Date from Oalders. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  HTTP::Date: Inefficient Regular Expression Complexity

  CVE-2026-14741Jul 17, 2026Oalders

  HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date. parse_date() matches the date string against a chain of alternative regexes, and str2time() delegates to it. Several of these patterns place unbounde