GCVE-110-MAGEIA-2026-149

Advisory Published

Vulnetix · Advisory published May 18, 2026

WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a world-writable on-disk cache, enabling local response forgery and code execution.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	perl-WWW-Mechanize-Cached	0 (affected), 2.0.0-1.mga9 (unaffected)	—
Mageia	perl-File-XDG	0 (affected), 1.30.0-1.mga9 (unaffected)	—
Mageia	perl-Path-Tiny	0 (affected), 0.150.0-1.mga9 (unaffected)	—

References

Updated perl-WWW-Mechanize-Cached, perl-File-XDG & perl-Path-Tiny packages fix security vulnerabilities

advisory

Updated perl-WWW-Mechanize-Cached, perl-File-XDG & perl-Path-Tiny packages fix security vulnerabilities

issue

Updated perl-WWW-Mechanize-Cached, perl-File-XDG & perl-Path-Tiny packages fix security vulnerabilities

url

Updated perl-WWW-Mechanize-Cached, perl-File-XDG & perl-Path-Tiny packages fix security vulnerabilities

url

Browse GCVE Records

74,267 records in the GCVE database · Updated July 22, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON