CVE-2026-14895 String::Util versions before 1.36 for Perl are susceptible to a regular expression denial of service

[
  {
    "collectionURL": "https://cpan.org/modules",
    "defaultStatus": "unaffected",
    "packageName": "String-Util",
    "product": "String::Util",
    "programFiles": [
      "lib/String/Util.pm"
    ],
    "programRoutines": [
      {
        "name": "String::Util::trim"
      },
      {
        "name": "String::Util::rtrim"
      }
    ],
    "repo": "https://github.com/scottchiefbaker/String-Util",
    "vendor": "BAKERSCOT",
    "versions": [
      {
        "lessThan": "1.36",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]