CVE-2026-116130 | HTTP::Parser::XS up to 0.17 XS parser parse_http_request PATH_INFO input validation

A vulnerability marked as critical has been reported in HTTP::Parser::XS up to 0.17. This vulnerability affects the function parse_http_request of the component XS parser. Performing a manipulation of the argument PATH_INFO results in improper input validation.

This vulnerability is cataloged as CVE-2026-116130. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More