Furl vulnerabilities

CVEs whose affected-version data names the Furl package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-65059None

4d ago

Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses

Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses. Furl inflates a response body sent with a gzip, x-gzip or deflate Content-Encoding and appends the output to the response string …

▾ SunlitEPSS 0.23%via CVEORG