CVE-2026-75628

Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because sameoriginpath accepts a backslash or tab in the return parameter. oauth2login reads the return parameter from the initiation request, runs sameoriginpath over it, and stores the survivor in...

CVE-2026-75628

Punk::OAuth2 for Perl (versions before 0.03) contains an open redirect vulnerability in the same_origin_path function used by oauth2_login. The check rejects values that don't begin with a slash, have a slash as the second byte, or contain CR/LF, but accepts a backslash and a tab . Because the UR...

Oracle Linux 8 : perl:5.32 (ELSA-2026-48225)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-48225 advisory. - Fix CVE-2025-40909 - Clone dirhandles without fchdir perl-Algorithm-Diff - Fix CVE-2026-9538: Denial of Service via crafted tar header with large entry size...

MiracleLinux 9 : perl-DBI-1.643-9.el9_8.3 (AXSA:2026-1593:02)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1593:02 advisory. DBI: DBI: Arbitrary code execution via caller-influenced Profile attribute CVE-2026-14380 DBI: DBI: Heap overflow when preparsing SQL statements wit...

PT-2026-79087

Catalyst::Plugin::Static::Simple versions through 0.38 for Perl mark responses as publicly cacheable. The serve static method always sets the Cache-Control header to "public", with no means of overriding it. This advises proxies that the content may be stored in a shared cache, and may be reused ...

MiracleLinux 9 : perl-Archive-Tar-2.38-6.el9_8.2 (AXSA:2026-1589:04)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1589:04 advisory. perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size CVE-2026-9538 Tenable has extracted the preceding...

Linux Distros Unpatched Vulnerability : CVE-2026-73639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - libimager-perl - None Ubuntu Linux - Unknown description CVE-2026-73639 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2026-73638

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - libimager-perl - None Ubuntu Linux - Unknown description CVE-2026-73638 Note that Nessus relies on the presence of the package as reported by the...

RHEL 8 : perl-Date-Manip (RHSA-2026:57562)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:57562 advisory. Date::Manip is a series of modules designed to make any common date/time operation easy to do. Operations such as comparing two times, determining a...

Important: perl-Date-Manip security update

Date::Manip is a series of modules designed to make any common date/time operation easy to do. Operations such as comparing two times, determining a data a given amount of time from another, or parsing international times are all easily done. It deals with time as it is used in the Gregorian...

perl-Date-Manip security update

6.60-3.1 - Fix CVE-2026-60075: prevent ReDoS via crafted strings with long interior whitespace runs in date/time parsing - Resolves: RHEL-239807...

Oracle Linux 10 : perl-Date-Manip (ELSA-2026-56971)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-56971 advisory. 6.94-5.1 - Fix CVE-2026-60075: prevent quadratic-cost regex DoS in date/time parsing by rejecting overly long input strings Resolves: RHEL-239790 Tenable has...

The vulnerability of PL/Tcl and PL/Perl extensions of the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of PL/Tcl and PL/Perl extensions of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Important: Red Hat Security Advisory: perl-Date-Manip security update

An update for perl-Date-Manip is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

perl-Date-Manip: Date::Manip for Perl: Denial of Service via CPU exhaustion in date parsing

A flaw was found in Date::Manip for Perl. An attacker could exploit a vulnerability in the parsetime function by providing a specially crafted input string containing long sequences of whitespace. This could lead to excessive CPU consumption due to inefficient processing, resulting in a Denial of...

Important: Red Hat Security Advisory: perl-Date-Manip security update

An update for perl-Date-Manip is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...

perl-Date-Manip: Date::Manip for Perl: Denial of Service via CPU exhaustion in date parsing

A flaw was found in Date::Manip for Perl. An attacker could exploit a vulnerability in the parsetime function by providing a specially crafted input string containing long sequences of whitespace. This could lead to excessive CPU consumption due to inefficient processing, resulting in a Denial of...

CVE-2026-72889

Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify. verify resolves the signature method class from the signaturemethod parameter of the incoming message. signaturemethod is required on every request, so the algorithm used to check a signature is...

CVE-2026-72889

Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify. verify resolves the signature method class from the signaturemethod parameter of the incoming message. signaturemethod is required on every request, so the algorithm used to check a signature is...

UBUNTU-CVE-2026-72889

Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify. verify resolves the signature method class from the signaturemethod parameter of the incoming message. signaturemethod is required on every request, so the algorithm used to check a signature is...