CVE-2026-10879

CVE-2026-10879 affects Perl DBI versions before 1.648. The vulnerability is a heap overflow in the preparse routine when preparing SQL with more than 9 binders. The preparse expands placeholders to :pN while allocating only three characters per binder; placeholders 10–99 require four, 100–999 req...