CVE-2026-14380 DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile

DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute, DBI splits it into path, package and arguments, and interpolates the package part in a string eval with no validation of the package...

CVE-2026-14380

DBI for Perl prior to 1.650 is vulnerable to code execution via the Profile attribute. When a string is assigned to Profile, DBI splits it into path, package and arguments and interpolates the package name in a string eval without validating the package, allowing attacker-controlled input from DB...