Advisories · Technology

RRWO Plack::App::Prerender.

Every CVE that names RRWO Plack::App::Prerender among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-17552 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via unvalidated REQUEST_URI concatenation in call
- RRWO Plack::App::Prerender
- Server-side request forgery (SSRF)
Not analysed yet 27 Jul 2026