Debian/libhttp-date-perl: high 7.5
HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date. parse_date() matches the date string against a chain of alternative regexes, and str2time
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: DEBIAN-CVE-2026-14741#Debian:13/libhttp-date-perl
- https://security-tracker.debian.org/tracker/CVE-2026-14741
published · modified · JSON