Latest vulnerabilities for vendor "perl"

Where

Sort:

Software

perl 5.30.0

perl perl

perl dbi

perl

perl file::find::rule

perl cgi application module

perl cgi lite

perl cgi::application

perl clipboard

perl convert uulib

perl crypt::randomencryption

perl io::compress::brotli

perl pcre

perl plrpc

perl string::compare::constanttime

perl suidperl

perl web::api

perl-encode

Perl PerlPerl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds

Risk 28

First published (updated )

CVE-2026-8376

oss-secCVE-2026-4176: Perl versions from 5.9.4 befo5.40.4-RC1, from 5.41.0 befo5.42.2-RC1, from 5.43.0 befo5.43.9 contain a vulnerable version of Compss::Raw::Zlib

First published (updated )

https://seclists.org/oss-sec/2026/q1/408

oss-secCVE-2026-4176: Perl versions from 5.9.4 befo5.40.4-RC1, from 5.41.0 befo5.42.2-RC1, from 5.43.0 befo5.43.9 contain a vulnerable version of Compss::Raw::Zlib

First published (updated )

https://seclists.org/oss-sec/2026/q1/407

Perl PerlPerl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib

Risk 63

Severity

9.8

EPSS

0.03%

First published (updated )

CVE-2026-4176

YAML YAML::SyckYAML::Syck versions before 1.36 for Perl has missing Null-Terminators which causes Out-of-Bounds Read and potential Information Disclosure

Risk 38

Severity

6.5

First published (updated )

CVE-2025-11683

Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update SupportModerate: perl-JSON-XS security update

Risk 19

Severity

First published (updated )

Advisory

RHSA-2025:17430

RHSA-2025:17162Moderate: perl-JSON-XS security update

Risk 38

First published (updated )

Advisory

RHSA-2025:17162

Perl JSON-XSModerate: perl-JSON-XS security update

Risk 38

First published (updated )

Advisory

RHSA-2025:17163

Perl Crypt::RandomEncryptionCrypt::RandomEncryption for Perl uses insecure rand() function during encryption

Risk 66

Severity

9.1

First published (updated )

CVE-2024-58040

Perl JSON::XSBuffer Overflow

Risk 19

Severity

First published (updated )

REDHAT-BUG-2393878

Microsoft azl3 perl-JSON-XS 4.03-2JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

Risk 46

Severity

7.5

First published (updated )

CVE-2025-40928

Perl Perl 5.42End of life details

EOL

Jul 3, 2028

First published (updated )

EOL-perl-5.42

Perl YAML::LibYAMLImportant: perl-YAML-LibYAML security update

Risk 32

First published (updated )

Advisory

RHSA-2025:9329

Perl CryptXPerl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow

Risk 86

Severity

9.8

First published (updated )

CVE-2025-40914

Perl FCGIImportant: perl-FCGI:0.78 security update

Risk 38

First published (updated )

Advisory

RHSA-2025:8890

Perl FCGIImportant: perl-FCGI:0.78 security update

Risk 38

First published (updated )

Advisory

RHSA-2025:8696

Perl FCGIImportant: perl-FCGI security update

Risk 32

First published (updated )

Advisory

RHSA-2025:8636

CVE-2011-10007: File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `gp()` encounters a crafted file name

First published (updated )

https://seclists.org/oss-sec/2025/q2/220

CVE-2011-10007: File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `gp()` encounters a crafted file name

First published (updated )

https://seclists.org/oss-sec/2025/q2/218

Perl File::Find::RuleFile::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encou…

Risk 33

Severity

First published (updated )

REDHAT-BUG-2370424

Perl File::Find::RuleFile::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted file name

Risk 82

Severity

8.8

First published (updated )

CVE-2011-10007

CVE-2025-40909: Perl thads have a working dictory race condition whefile operations may target unintended paths

First published (updated )

https://seclists.org/oss-sec/2025/q2/196

CVE-2025-40909: Perl thads have a working dictory race condition whefile operations may target unintended paths

First published (updated )

https://seclists.org/oss-sec/2025/q2/195

CVE-2025-40909: Perl thads have a working dictory race condition whefile operations may target unintended paths

First published (updated )

https://seclists.org/oss-sec/2025/q2/193

CVE-2025-40909: Perl thads have a working dictory race condition whefile operations may target unintended paths

First published (updated )

https://seclists.org/oss-sec/2025/q2/194

CVE-2025-40909: Perl thads have a working dictory race condition whefile operations may target unintended paths

First published (updated )

https://seclists.org/oss-sec/2025/q2/190

Perl PerlRace Condition

Risk 19

Severity

First published (updated )

REDHAT-BUG-2369407

CVE-2025-40909: Perl thads have a working dictory race condition whefile operations may target unintended paths

First published (updated )

https://seclists.org/oss-sec/2025/q2/188

Perl IO::Compress::BrotliIO::Compress::Brotli versions prior to 0.007 for Perl have an integer overflow in the bundled Brotli C library

Risk 86

Severity

9.8

First published (updated )

CVE-2020-36846

CVE-2024-56406: Perl 5.34, 5.36, 5.38 and 5.40 avulnerable to a heap buffer overflow when transliterating non-ASCII bytes

First published (updated )

https://seclists.org/oss-sec/2025/q2/50

Trending

Vendor Risk Score

Software

Perl PerlPerl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds

oss-secCVE-2026-4176: Perl versions from 5.9.4 befo5.40.4-RC1, from 5.41.0 befo5.42.2-RC1, from 5.43.0 befo5.43.9 contain a vulnerable version of Compss::Raw::Zlib

oss-secCVE-2026-4176: Perl versions from 5.9.4 befo5.40.4-RC1, from 5.41.0 befo5.42.2-RC1, from 5.43.0 befo5.43.9 contain a vulnerable version of Compss::Raw::Zlib

Perl PerlPerl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib

YAML YAML::SyckYAML::Syck versions before 1.36 for Perl has missing Null-Terminators which causes Out-of-Bounds Read and potential Information Disclosure

Don't miss critical vulnerabilities

Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update SupportModerate: perl-JSON-XS security update

RHSA-2025:17162Moderate: perl-JSON-XS security update

Perl JSON-XSModerate: perl-JSON-XS security update

Perl Crypt::RandomEncryptionCrypt::RandomEncryption for Perl uses insecure rand() function during encryption

Perl JSON::XSBuffer Overflow

Don't miss critical vulnerabilities

Microsoft azl3 perl-JSON-XS 4.03-2JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

Perl Perl 5.42End of life details

Perl YAML::LibYAMLImportant: perl-YAML-LibYAML security update

Perl CryptXPerl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow

Perl FCGIImportant: perl-FCGI:0.78 security update

Don't miss critical vulnerabilities

Perl FCGIImportant: perl-FCGI:0.78 security update

Perl FCGIImportant: perl-FCGI security update

CVE-2011-10007: File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `gp()` encounters a crafted file name

CVE-2011-10007: File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `gp()` encounters a crafted file name

Perl File::Find::RuleFile::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encou…

Don't miss critical vulnerabilities

Perl File::Find::RuleFile::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted file name

CVE-2025-40909: Perl thads have a working dictory race condition whefile operations may target unintended paths

CVE-2025-40909: Perl thads have a working dictory race condition whefile operations may target unintended paths

CVE-2025-40909: Perl thads have a working dictory race condition whefile operations may target unintended paths

CVE-2025-40909: Perl thads have a working dictory race condition whefile operations may target unintended paths

Don't miss critical vulnerabilities

CVE-2025-40909: Perl thads have a working dictory race condition whefile operations may target unintended paths

Perl PerlRace Condition

CVE-2025-40909: Perl thads have a working dictory race condition whefile operations may target unintended paths

Perl IO::Compress::BrotliIO::Compress::Brotli versions prior to 0.007 for Perl have an integer overflow in the bundled Brotli C library

CVE-2024-56406: Perl 5.34, 5.36, 5.38 and 5.40 avulnerable to a heap buffer overflow when transliterating non-ASCII bytes

Don't miss critical vulnerabilities

Company

Resources

Contact