CVE-2026-126673

The Data::Dump::Streamer Perl module (versions before 3.00 ) contains a vulnerability in the _dump_qr function. The issue is caused by failing to escape "$" or "@" characters when writing a Regexp's pattern into a qr literal . Specifically, patterns containing {@[ ... ]} or ${...} are executed as...