Cyber ·
CVE-2026-115825: HTTP::Server::PSGI (Perl) before 1.0056 can be crashed via high Content-Length
CPAN Security Group advisory: a single request declaring a high Content-Length can crash the HTTP::Server::PSGI server, part of the Plack distribution, in versions before 1.0056.
According to advisory CVE-2026-115825, published on the oss-sec list and attributed to the CPAN Security Group, HTTP::Server::PSGI, a component of the Plack distribution for Perl, can be crashed by a single request declaring a high Content-Length. The issue affects versions before 1.0056. The feed lists October 25 as the date, and the text reviewed is an automatic translation of the original.
The available excerpt does not describe exploitation details beyond the unavailability effect. To consult and verify, use the original advisory on the oss-sec list, the Plack distribution records on MetaCPAN, and the project's official repository, comparing the installed version with the fixed one.
Rota Nacional is not a fix for this problem, since it does not host or replace third-party PSGI servers. If your organization uses Perl with this component, the action is to update the dependency and restart affected services.