CVE-2026-13048

creationtimestamp| type| source ---|---|--- 2026-08-13 21:11:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/ddhuedzjchgbw...

CVE-2026-13048

Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because loadlexicon interpolates the language attribute into the catalog filename. loadlexicon builds the catalog path by appending Messages/$lang.po to the directory...