Cyber ·
CVE-2026-112921: Robots::Validate may flag report clients as impostor robots
Security advisory from the CPAN Security Group for the Perl library Robots::Validate. Versions from 0.4.3 up to but not including 0.4.10 may reuse User-Agent comparator state across requests.
Security advisory published on October 21, 2026 on the oss-sec feed, authored by Robert Rothenberg, with identifier CVE-2026-112921 assigned by the CPAN Security Group. The affected distribution is Robots-Validate. Versions from 0.4.3 up to but not including 0.4.10 may reuse the User-Agent comparator state between requests, which can cause report clients to be identified as impostor robots. The available text is an automatic translation of the original and does not detail other impacts. To verify, consult the original advisory on the oss-sec list and the distribution page on MetaCPAN, whose addresses appear in the source, and check the repository history for the fix included in version 0.4.10. The relevance to Rota Nacional is indirect: Rota does not patch third-party libraries. If your team uses this package in scripts or integrations, the path is to update it to version 0.4.10 or later.