HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values. (CVE-2026-7010)
{ "section": "core" }
"https://advisories.mageia.org/MGASA-2026-0140.json"