{"affected":[],"cveId":"CVE-2026-13575","cwes":["CWE-93"],"description":"HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::CHI.\n\nThe session id from the client's cookie reaches the CHI cache unchanged. The sibling HTTP::Session::Store::Memcached rejects ids that contain control characters, but the CHI store has no such check, and CHI does not escape keys for its memcached drivers.\n\nWith a memcached driver, a CR and LF in the session id end the cache command early, and the server reads the bytes after them as further commands.","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793564252380,"publishedAt":1793531938040,"references":[{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","tags":[],"url":"https://github.com/tokuhirom/http-session/commit/58288cbf941da6d2aad4ff5c0c79e523d9e583b4.patch"},{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","tags":[],"url":"https://metacpan.org/release/KTAT/http-session-0.53/source/lib/HTTP/Session/Store/CHI.pm"},{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","tags":[],"url":"https://metacpan.org/release/TOKUHIROM/http-session-0.54/changes"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"url":"http://www.openwall.com/lists/oss-security/2026/11/01/2"}],"remediation":[],"revision":"9f58d422208d750abf54cb64e56e1e80b8f60f2c1997970642110b43d79c20c7","sources":[{"modifiedAt":1793564252380,"name":"NVD","retrievedAt":1793578573304,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13575"}],"ssvc":null,"status":"published","title":"CVE-2026-13575","updatedAt":1793578573304}