CVE-2026-14380

DBI for Perl prior to 1.650 is vulnerable to code execution via the Profile attribute. When a string is assigned to Profile, DBI splits it into path, package and arguments and interpolates the package name in a string eval without validating the package, allowing attacker-controlled input from DB...