early signals oss-security infra

CVE-2026-115825: HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length

// AI summary

Plack versions before 1.0056 allow a single request to crash the HTTP::Server::PSGI server by declaring a large Content-Length, identified as CVE-2026-115825.

// from the source

Posted by Robert Rothenberg on Oct 25 ======================================================================== CVE-2026-115825 CPAN Security Group ======================================================================== CVE ID: CVE-2026-115825 Distribution: Plack Versions: before 1.0056 MetaCPAN: https://metacpan.org/dist/Plack VCS Repo: https://github.com/plack/Plack ...