CVE-2026-110758

The Text::CSV_XS module for Perl is vulnerable in versions prior to 1.65 due to a buffer under-read (CWE-127). When the allow_whitespace option is enabled, the strip_trail_whitespace function incorrectly removes trailing spaces and tabs without stopping at the start of a field. For fields consist...

CVE-2026-110758 Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespace

Text::CSVXS versions before 1.65 for Perl read before the start of an all-blank field under allowwhitespace in striptrailwhitespace. Under allowwhitespace, striptrailwhitespace removes trailing spaces and tabs from each unquoted field without stopping at the start of the field. For a field of onl...