Haarg

2 CVEs across 3 Haarg products. Browse Haarg vulnerabilities, severities, and proof-of-concept exploits.

Haarg products with known CVEs

ProductCVEs
Http::tiny2
Catalyst::plugin::session1
Storable1
Haarg CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-57433Critical9.82026-07-13Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record. retrieve_hook_common reads a signed 32-bit…
CVE-2026-7017High7.12026-07-07HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets. When the server returns a 3xx redirect, `_maybe_redirec…
CVE-2026-7010Medium6.52026-05-11HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values. The unvalidated inputs are the method and…
CVE-2025-40924Medium6.52025-07-17Catalyst::Plugin::Session before version 0.44 for Perl generates session ids insecurely. The session id is generated from a (usually SHA-1) hash of a simple c…