Haarg Http::tiny
2 CVEs affecting Haarg Http::tiny. Latest disclosed: 2026-07-07. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-7017 | High | 7.1 | 2026-07-07 | HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets. When the server returns a 3xx redirect, `_maybe_redirec… |
CVE-2026-7010 | Medium | 6.5 | 2026-05-11 | HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values. The unvalidated inputs are the method and… |