header is not a bug; it's one of the functions exported by CGI when using ":all" or ":standard". If you don't export it, you either call it with a fully qualified name or as a method.

use CGI;
print CGI::header();
# or
my $q = CGI->new;
print $q->header;
[download]