CGI versions prior to 5.00 for Perl contain a denial of service vulnerability. This occurs when submitted values are used as regular expressions for optgroup selection in the scrolling_list function without proper escaping. Malicious input can cause the process to crash or become unresponsive due to heavy regex backtracking.