/ 
Furl-3.16
⭐ Starred 104

Changes for version 3.16 - 2026-11-06

  • [SECURITY] Fix memory exhaustion via unbounded decompression of gzip/deflate responses, a.k.a. "zip bomb" (CVE-2026-65059) (#139, robrwo++)
  • Add max_decompressed_size option to limit the size of a decoded response body. By default the limit is 100 MiB for responses held in memory, and there is no limit for responses streamed with write_file/write_code. Going over the limit makes the request return an internal 500 response (with X-Internal-Response) (#140)

Documentation

README.md

Modules

Furl
Lightning-fast URL fetcher
Furl::HTTP
Low level interface to Furl
Furl::Headers
HTTP Headers object
Furl::Request
Request object for Furl
Furl::Response
Response object for Furl

Provides

Furl::ConnectionCache
in lib/Furl/ConnectionCache.pm
Furl::ZlibStream
in lib/Furl/ZlibStream.pm

Examples

Other files