Latest vulnerabilities for vendor "perl"

Perl Data::Intern::SharedData::Intern::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated slot, reverse and arena indices in si_idx_find

Risk 66

Severity

9.1

First published (updated )

CVE-2026-59145

Perl Data::RingBuffer::SharedData::RingBuffer::Shared versions before 0.04 for Perl allow a stack buffer overflow via an unvalidated elem_size in ring_read_seq

Risk 86

Severity

9.8

First published (updated )

CVE-2026-59144

Perl Net::DNSNet::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR

Risk 90

Severity

9.8

First published (updated )

CVE-2026-64193

Perl HTTP::DateHTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date

Risk 46

Severity

7.5

First published (updated )

CVE-2026-14741

oss-secCVE-2026-57076: YAML::Syck versions befo1.47 for Perl allow a heap use-after-fe via an anchor name used as an anchors-table key in syck_hdlr_add_anchor

First published (updated )

https://seclists.org/oss-sec/2026/q3/160

Perl YAML::SyckYAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key in syck_hdlr_add_anchor

Risk 73

Severity

7.8

First published (updated )

CVE-2026-57076

Perl HTML::BareHTML::Bare versions through 0.04 for Perl have an unbounded character lookahead

Risk 70

Severity

9.1

First published (updated )

CVE-2026-57073

Perl HTML::BareHTML::Bare versions through 0.04 for Perl will hang in an infinite loop when parsing malformed attributes

Risk 46

Severity

7.5

First published (updated )

CVE-2026-13397

Perl DBIDBI versions before 1.651 for Perl do not enforce statement handle consistency with the row

Risk 70

Severity

9.1

Trending

Month

First published (updated )

CVE-2026-60082

Perl DBI::ProfileDataDBI::ProfileData versions before 1.651 for Perl do not limit the path index

Risk 46

Severity

7.5

Trending

Month

First published (updated )

CVE-2026-60081

Perl DBD::FileDBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location

Risk 60

Severity

7.7

Trending

Month

First published (updated )

CVE-2026-15392

oss-secCVE-2026-57432: Perl versions through 5.43.10 have an integer overflow in S_measu_struct leading to an out-of-bounds heap ad in pack and unpack

First published (updated )

https://seclists.org/oss-sec/2026/q3/127

oss-secCVE-2026-13221: Perl versions through 5.43.9 produce silently incorct gular expssion matches when an alternation of mothan 65535 fixed string branches is compiled into a trie in Perl_study_chunk

First published (updated )

https://seclists.org/oss-sec/2026/q3/126

Perl PerlPerl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk

Risk 70

Severity

9.1

Trending

Month

First published (updated )

CVE-2026-13221

Perl PerlPerl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack

Risk 79

Severity

8.4

Trending

Month

First published (updated )

CVE-2026-57432

Perl String::UtilString::Util versions before 1.36 for Perl are susceptible to a regular expression denial of service

Risk 46

Severity

7.5

First published (updated )

CVE-2026-14895

Perl DBIDBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment

Risk 70

Severity

9.1

Trending

Month

First published (updated )

CVE-2026-14740

Perl DBI DBIDBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders

Risk 86

Severity

9.8

First published (updated )

CVE-2026-14739

DBI DBIDBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile

Risk 84

Severity

8.8

Trending

Month

First published (updated )

CVE-2026-14380

Perl Module::LoadModule::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded

Risk 86

Severity

9.8

First published (updated )

CVE-2011-10043

Perl Net::IP::LPMNet::IP::LPM versions through 1.10 for Perl allow a heap out-of-bounds read via an unbounded prefix length

Risk 70

Severity

9.1

First published (updated )

CVE-2026-56015

Perl CGI::Session::ID::md5CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources

Risk 37

Severity

5.9

First published (updated )

CVE-2026-56016

Perl Net::BitTorrentNet::BitTorrent versions before 2.1.0 for Perl generate the MSE Diffie-Hellman private key with a non-cryptographic PRNG

Risk 37

Severity

5.9

First published (updated )

CVE-2026-57082

Perl JavaScript::Minifier::XSJavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash

Risk 46

Severity

7.5

First published (updated )

CVE-2026-56017

Perl List::SomeUtils::XSList::SomeUtils::XS versions before 0.59 for Perl have a heap buffer overflow in the pairwise function

Risk 46

Severity

7.5

First published (updated )

CVE-2026-12844

Perl IO-CompressImportant: perl-IO-Compress security update

Risk 77

First published (updated )

Advisory

RHSA-2026:30085

oss-secProposal: Add separate oss-security-vulnerability-ports mailing list (for AI vulnpocalypse)

First published (updated )

https://seclists.org/oss-sec/2026/q2/922

cpan/DBIDBI versions before 1.648 for Perl saved errors in a limited-sized buffer

Risk 63

Severity

9.8

EPSS

0.45%

First published (updated )

CVE-2026-9698

cpan/DBIDBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders

Risk 91

Severity

9.8

First published (updated )

CVE-2026-10879

Perl Archive::TarArchive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside…

Risk 33

Severity

7

First published (updated )

REDHAT-BUG-2481314

Trending

Vendor Risk Score

Software

Perl Data::Intern::SharedData::Intern::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalidated slot, reverse and arena indices in si_idx_find

Perl Data::RingBuffer::SharedData::RingBuffer::Shared versions before 0.04 for Perl allow a stack buffer overflow via an unvalidated elem_size in ring_read_seq

Perl Net::DNSNet::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR

Perl HTTP::DateHTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date

oss-secCVE-2026-57076: YAML::Syck versions befo1.47 for Perl allow a heap use-after-fe via an anchor name used as an anchors-table key in syck_hdlr_add_anchor

Don't miss critical vulnerabilities

Perl YAML::SyckYAML::Syck versions before 1.47 for Perl allow a heap use-after-free via an anchor name reused as an anchors-table key in syck_hdlr_add_anchor

Perl HTML::BareHTML::Bare versions through 0.04 for Perl have an unbounded character lookahead

Perl HTML::BareHTML::Bare versions through 0.04 for Perl will hang in an infinite loop when parsing malformed attributes

Perl DBIDBI versions before 1.651 for Perl do not enforce statement handle consistency with the row

Perl DBI::ProfileDataDBI::ProfileData versions before 1.651 for Perl do not limit the path index

Don't miss critical vulnerabilities

Perl DBD::FileDBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location

oss-secCVE-2026-57432: Perl versions through 5.43.10 have an integer overflow in S_measu_struct leading to an out-of-bounds heap ad in pack and unpack

oss-secCVE-2026-13221: Perl versions through 5.43.9 produce silently incorct gular expssion matches when an alternation of mothan 65535 fixed string branches is compiled into a trie in Perl_study_chunk

Perl PerlPerl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk

Perl PerlPerl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack

Don't miss critical vulnerabilities

Perl String::UtilString::Util versions before 1.36 for Perl are susceptible to a regular expression denial of service

Perl DBIDBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment

Perl DBI DBIDBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders

DBI DBIDBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile

Perl Module::LoadModule::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded

Don't miss critical vulnerabilities

Perl Net::IP::LPMNet::IP::LPM versions through 1.10 for Perl allow a heap out-of-bounds read via an unbounded prefix length

Perl CGI::Session::ID::md5CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources

Perl Net::BitTorrentNet::BitTorrent versions before 2.1.0 for Perl generate the MSE Diffie-Hellman private key with a non-cryptographic PRNG

Perl JavaScript::Minifier::XSJavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash

Perl List::SomeUtils::XSList::SomeUtils::XS versions before 0.59 for Perl have a heap buffer overflow in the pairwise function

Don't miss critical vulnerabilities

Perl IO-CompressImportant: perl-IO-Compress security update

oss-secProposal: Add separate oss-security-vulnerability-ports mailing list (for AI vulnpocalypse)

cpan/DBIDBI versions before 1.648 for Perl saved errors in a limited-sized buffer

cpan/DBIDBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders

Perl Archive::TarArchive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside…

Don't miss critical vulnerabilities

Company

Resources

Contact