CVE-2026-60074

Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month and day with the \d shorthand, which on a character string matches the whole Unicode decimal digit property \pNd and not...

CVE-2026-60074

CVE-2026-60074 affects Date::Manip for Perl up to version 6.99. The issue arises when parsing dates: the regex uses \d to capture year, month, and day, which matches Unicode decimal digits (not just ASCII 0-9). During numeric validation, parsed fields can be truncated by Perl at the first non-ASC...

EUVD-2026-51124

Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month and day with the \d shorthand, which on a character string matches the whole Unicode decimal digit property \pNd and not...