CVE-2026-87768

DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds. normalizeleapseconds crosses day boundaries one day at a time, so addseconds = $n on an object with a non-floating time zone takes about |$n|/86400 iterations, and nothing limits $n. The XS...

EUVD-2026-113902

DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds. normalizeleapseconds crosses day boundaries one day at a time, so addseconds = $n on an object with a non-floating time zone takes about |$n|/86400 iterations, and nothing limits $n. The XS...

CVE-2026-87768

The DateTime::Lite Perl module (versions before 0.8.1 ) is vulnerable to CPU exhaustion due to inefficient algorithmic complexity (CWE-407 ). The root cause lies in the _normalize_leap_seconds function, which processes day boundaries one day at a time. When using add(seconds => $n) on an objec...

CVE-2026-87768 DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds

DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds. normalizeleapseconds crosses day boundaries one day at a time, so addseconds = $n on an object with a non-floating time zone takes about |$n|/86400 iterations, and nothing limits $n. The XS...

PT-2026-133517

DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds. normalize leap seconds crosses day boundaries one day at a time, so addseconds = $n on an object with a non-floating time zone takes about |$n|/86400 iterations, and nothing limits $n. The X...