EUVD-2026-103193

Text::CSVXS versions from 1.46 before 1.65 for Perl have a use-after-free of bindcolumns variables when skipemptyrows skips an empty line in getline. With bindcolumns, the parser writes each field into the caller's own scalar without taking a reference to it. When skipemptyrows skips an empty las...

CVE-2026-110753

Text::CSVXS versions from 1.46 before 1.65 for Perl have a use-after-free of bindcolumns variables when skipemptyrows skips an empty line in getline. With bindcolumns, the parser writes each field into the caller's own scalar without taking a reference to it. When skipemptyrows skips an empty las...

CVE-2026-110753 Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns variables when skip_empty_rows skips an empty line in getline

Text::CSVXS versions from 1.46 before 1.65 for Perl have a use-after-free of bindcolumns variables when skipemptyrows skips an empty line in getline. With bindcolumns, the parser writes each field into the caller's own scalar without taking a reference to it. When skipemptyrows skips an empty las...

CVE-2026-110753

The Text::CSV_XS Perl module (versions 1.46 to 1.64 ) is vulnerable to a use-after-free condition. When using bind_columns , the parser fails to check if a field scalar is bound before freeing it when skip_empty_rows skips an empty line in getline . The same issue occurs in "eof" mode on any empt...

Text::CSV_XS -- multiple vulnerabilities

H.Merijn Brand - Tux reports: Text::CSVXS versions before 1.65 have these vulnerabilities listed below. CVE-2026-110759: parse : report trailing lone CR, do not store EOF as 0xFF CVE-2026-110758: Under allowwhitespace, do not strip beyond field start CVE-2026-110757: combine : decide quoting from...