RRWO vulnerabilities

CVEs per yearBy the year they were published

1. 20252
2. 202618

Newest CVEs

• CVE-2026-19566

  Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths

  RRWO · Net::CIDR::Set

  High7.5
• CVE-2026-17435

  File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files

  RRWO · File::Rotate::Simple

  Low2.5
• CVE-2026-18536

  Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP

  RRWO · Data::Entropy

  High7.5
• CVE-2026-17552

  Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via unvalidated REQUEST_URI concatenation in call

  RRWO · Plack::App::Prerender

  Critical9.1
• CVE-2026-16766

  Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection (RCE) via PDF render options

  RRWO · Catalyst::View::Wkhtmltopdf

  Critical9.8
• CVE-2026-49942

  Net::CIDR::Set versions through 0.20 for Perl did not validate network masks

  RRWO · Net::CIDR::Set

  High7.3
• CVE-2026-49941

  Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses

  RRWO · Net::CIDR::Set

  High7.5
• CVE-2026-49940

  Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasks

  RRWO · Net::CIDR::Set

  Medium6.5
• CVE-2026-9658

  Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header injections in request paths

  RRWO · Plack::Middleware::Security::Common

  High7.3
• CVE-2026-46740

  Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections

  RRWO · Mojolicious::Plugin::Statsd

  Medium5.3