CGI::Cookie versions from 4.67 up to but not including 5.00 for Perl contain a denial of service vulnerability. The flaw arises because the expires value from client cookies is used unescaped as a regular expression pattern in the parse method, allowing crafted input to cause process crashes or excessive backtracking.