ROOT-OS-DEBIAN-13-CVE-2026-7017 CVE-2026-7017 in perl - Patched by Root

Root has patched CVE-2026-7017 in the perl package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-42496 CVE-2026-42496 in perl - Patched by Root

Root has patched CVE-2026-42496 in the perl package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-12087 CVE-2026-12087 in perl - Patched by Root

Root has patched CVE-2026-12087 in the perl package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-73194

A flaw was found in DBI for Perl. An unvalidated numeric placeholder in the preparse function can lead to a heap out-of-bounds write. When processing an untrusted statement, a specially crafted numeric placeholder can cause the binder counter to become negative. This results in subsequent...

CVE-2026-73193

A flaw was found in DBI. On 32-bit Perl systems, a vulnerability exists in the preparse function due to an integer wraparound when calculating the output buffer size. A remote attacker can exploit this by providing a specially crafted, excessively large statement. This can lead to a heap...

CVE-2026-13401

A flaw was found in perl-XML-Bare. A remote attacker can exploit this vulnerability by providing specially crafted XML input with malformed attributes. This can cause the parsercparse function to enter an infinite loop, leading to a Denial of Service DoS condition where the application becomes...

Astra Linux – Vulnerability in libdata-validate-ip-perl

The Data::Validate::IP module in Perl version 0.29 does not properly handle extra zero characters at the beginning of an IP address string. In some cases, this allows attackers to bypass access controls that are based on IP addresses...

Astra Linux – Vulnerability in libmojolicious-perl

The Mojolicious module prior to version 8.65 for Perl is vulnerable to securecompare timing attacks, which allow an attacker to guess the length of a secret string. Only versions after 1.74 are affected...

Astra Linux – Vulnerability in Perl

HTTP::Tiny, a Perl core module since version 5.13.9 and available as a standalone package on CPAN, has an insecure default TLS configuration. In this configuration, users are required to explicitly choose to verify certificates...

Astra Linux – Vulnerability in libxml-parser-perl

XML::Parser versions up to 2.47 for Perl have a heap buffer overflow issue in stserialstack. In the case where stackptr == stacksize - 1, the stack will NOT be expanded. As a result, the new value will be written at location ++stackptr, which equals stacksize. This means that the new value falls...

Astra Linux – Vulnerability in libimage-exiftool-perl

Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and above allows arbitrary code execution when parsing the malicious image...

Astra Linux – Vulnerability in libnet-netmask-perl

The Net::Netmask module in versions prior to 2.0000 for Perl does not properly handle extra zero characters at the beginning of an IP address string. In some cases, this allows attackers to bypass access controls that are based on IP addresses...

Astra Linux – Vulnerability in Perl

CPAN 2.28 allows for Signature Verification Bypass...

Astra Linux – Vulnerability in libdbi-perl

A issue was discovered in the DBI module through version 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically specified via the fdir attribute in the data source name DSN. NOTE: This issue exists due to an incomplete fix for CVE-2014-10401...

Astra Linux – Vulnerability in libimage-exiftool-perl

In ExifTool’s lib/Image/ExifTool.pm, version 12.38 incorrectly handles the $file = /|$/ check, resulting in command injection...

Astra Linux – Vulnerability in libmodule-scandeps-perl

Qualys discovered that if unsanitized input was used with the Modules::ScanDeps library, before version 1.36, a local attacker could potentially execute arbitrary shell commands by opening a “pesky pipe” e.g., passing “commands|” as a filename or by passing arbitrary strings to the eval function...

Astra Linux – Vulnerability in pcre3

In PCRE before version 8.44, libpcre allowed integer overflows due to a large number appearing after a ?C substring...

Astra Linux – Vulnerability in Perl

CPAN.pm before version 2.35 does not verify TLS certificates when downloading distributions via HTTPS...

CVE-2026-78183

DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quotefloat. quotefloat allocates the length of the string + 1, which is the size of the bare numeric symbol plus NULL. But for special literals NaN, Inf, +Inf, -Inf, Infinity, +Infinity, -Infinity it emits the literal surrounded by...

UBUNTU-CVE-2026-78183

DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quotefloat. quotefloat allocates the length of the string + 1, which is the size of the bare numeric symbol plus NULL. But for special literals NaN, Inf, +Inf, -Inf, Infinity, +Infinity, -Infinity it emits the literal surrounded by...