CVE-2026-60074

The Date::Manip Perl module (versions through 6.99) contains a vulnerability where non-ASCII decimal digits can cause the return of corrupted dates. The issue stems from the use of the shorthand in parse regexes, which matches the Unicode decimal digit property p{Nd} instead of just ASCII [0-9]. ...