CVE-2026-60074

Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month and day with the \d shorthand, which on a character string matches the whole Unicode decimal digit property \pNd and not...

EUVD-2026-51124

Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month and day with the \d shorthand, which on a character string matches the whole Unicode decimal digit property \pNd and not...

CVE-2026-60074

The Date::Manip Perl module (versions through 6.99 ) is vulnerable to date corruption because its parse regexes use the \d shorthand, which matches the Unicode decimal digit property \p{Nd} instead of just [0-9] . When processing strings containing non-ASCII decimal digits, the module's check fun...