CVE-2026-60082

DBI for Perl versions before 1.651 does not enforce statement handle consistency with the row during prepare. If a statement handle has no fields but the source row is non-empty, the internal row-buffer reads from a negative array index, due to a mismatch between provided metadata and rows. The i...

EUVD-2026-43654

DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted = SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQL engine, evaluated WHERE predicates incorrectly in some cases. In the non-numeric string branch of the ismatched method, = was evaluated using Perl's le operator...