Debian/libhttp-date-perl: high 7.5
HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date. parse_date() matches the date string against a chain of alternative regexes, and str2time
Action: Upgrade libhttp-date-perl to 6.08-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.08-1 | - |
Fixed versions
| 6.08-1 |
Sources
- osv: DEBIAN-CVE-2026-14741#Debian:14/libhttp-date-perl
- https://security-tracker.debian.org/tracker/CVE-2026-14741
published · modified · JSON