19073 matches found
ROOT-OS-DEBIAN-13-CVE-2026-8376 CVE-2026-8376 in perl - Patched by Root
Root has patched CVE-2026-8376 in the perl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-7010 CVE-2026-7010 in perl - Patched by Root
Root has patched CVE-2026-7010 in the perl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-57432 CVE-2026-57432 in perl - Patched by Root
Root has patched CVE-2026-57432 in the perl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-7017 CVE-2026-7017 in perl - Patched by Root
Root has patched CVE-2026-7017 in the perl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-12087 CVE-2026-12087 in perl - Patched by Root
Root has patched CVE-2026-12087 in the perl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-42496 CVE-2026-42496 in perl - Patched by Root
Root has patched CVE-2026-42496 in the perl package for Root:Debian:13. Multiple fixed versions available...
CVE-2026-73194
A flaw was found in DBI for Perl. An unvalidated numeric placeholder in the preparse function can lead to a heap out-of-bounds write. When processing an untrusted statement, a specially crafted numeric placeholder can cause the binder counter to become negative. This results in subsequent...
CVE-2026-73193
A flaw was found in DBI. On 32-bit Perl systems, a vulnerability exists in the preparse function due to an integer wraparound when calculating the output buffer size. A remote attacker can exploit this by providing a specially crafted, excessively large statement. This can lead to a heap...
ROOT-OS-ALPINE-323-CVE-2026-13221 CVE-2026-13221 in perl - Patched by Root
Root has patched CVE-2026-13221 in the perl package for Root:Alpine:3.23. Multiple fixed versions available...
CVE-2026-13401
A flaw was found in perl-XML-Bare. A remote attacker can exploit this vulnerability by providing specially crafted XML input with malformed attributes. This can cause the parsercparse function to enter an infinite loop, leading to a Denial of Service DoS condition where the application becomes...
Astra Linux – Vulnerability in libmojolicious-perl
The Mojolicious module prior to version 8.65 for Perl is vulnerable to securecompare timing attacks, which allow an attacker to guess the length of a secret string. Only versions after 1.74 are affected...
Astra Linux – Vulnerability in pcre2
A out-of-bounds read vulnerability was discovered in the PCRE2 library, specifically in the pcre2jitcompile.c file’s compilexclassmatchingpath function. This issue relates to a Unicode property matching problem in JIT-compiled regular expressions. The vulnerability arises because the character is...
Astra Linux – Vulnerability in Perl
HTTP::Tiny, a Perl core module since version 5.13.9 and available as a standalone package on CPAN, has an insecure default TLS configuration. In this configuration, users are required to explicitly choose to verify certificates...
Astra Linux – Vulnerability in libimage-exiftool-perl
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and above allows arbitrary code execution when parsing the malicious image...
Astra Linux – Vulnerability in libimage-exiftool-perl
In ExifTool’s lib/Image/ExifTool.pm, version 12.38 incorrectly handles the $file = /|$/ check, resulting in command injection...
Astra Linux – Vulnerability in libconvert-asn1-perl
Perl-Convert-ASN1 also known as the Convert::ASN1 module for Perl up to version 0.27 allowed remote attackers to create an infinite loop due to unexpected inputs...
Astra Linux – Vulnerability in Perl
CPAN 2.28 allows for Signature Verification Bypass...
Astra Linux – Vulnerability in libmodule-scandeps-perl
Qualys discovered that if unsanitized input was used with the Modules::ScanDeps library, before version 1.36, a local attacker could potentially execute arbitrary shell commands by opening a “pesky pipe” e.g., passing “commands|” as a filename or by passing arbitrary strings to the eval function...
Astra Linux – Vulnerability in libnet-netmask-perl
The Net::Netmask module in versions prior to 2.0000 for Perl does not properly handle extra zero characters at the beginning of an IP address string. In some cases, this allows attackers to bypass access controls that are based on IP addresses...