Security Advisories (2)
CVE-2011-0633 (2011-01-20)

The Net::HTTPS module in libwww-perl (LWP) before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote attackers to spoof servers via man-in-the-middle (MITM) attacks involving hostnames that are not properly validated.

CPANSA-libwww-perl-2017-01 (2017-11-06)

LWP::Protocol::file can open existent file from file:// scheme. However, current version of LWP uses open FILEHANDLE,EXPR and it has ability to execute arbitrary command

NAME

Bundle::LWP - install all libwww-perl related modules

SYNOPSIS

perl -MCPAN -e 'install Bundle::LWP'

CONTENTS

MIME::Base64 - Used in authentication headers

Digest::MD5 - Needed to do Digest authentication

URI 1.10 - There are URIs everywhere

Net::FTP 2.58 - If you want ftp://-support

HTML::Tagset - Needed by HTML::Parser

HTML::Parser - Needed by HTML::HeadParser

HTML::HeadParser - To get the correct $res->base

LWP - The reason why you need the modules above

DESCRIPTION

This bundle defines all prerequisite modules for libwww-perl. Bundles have special meaning for the CPAN module. When you install the bundle module all modules mentioned in "CONTENTS" will be installed instead.

SEE ALSO

"Bundles" in CPAN