Cyber ·
CVE-2026-114629: Web::Simple for Perl allocates buffer from Content-Length
Web::Simple versions before 0.035 allocate a buffer based on the Content-Length header for URL-encoded body parameters. The advisory was published on October 24, 2026 on the oss-sec feed by the CPAN Security Group, with identifier CVE-2026-114629.
Advisory CVE-2026-114629 describes an issue in the Web-Simple distribution for Perl. According to the available text, versions before 0.035 allocate a buffer sized by the Content-Length header when processing URL-encoded body parameters. The post was made by Robert Rothenberg on October 24, 2026, on the oss-sec feed, and the record names the CPAN Security Group as the responsible party. The text received is an automatic translation and is truncated, so this source does not provide further details such as severity, exploitation conditions or exact impact.
To consult and verify the content, find identifier CVE-2026-114629 on the oss-sec feed or in the distribution repository on MetaCPAN, both listed in the original source. Compare the installed version with the affected range before drawing any conclusion about exposure.