PT-2026-116172

Name of the Vulnerable Software and Affected Versions Text::CSV XS versions prior to 1.65 Description An issue exists in the strip trail whitespace function when allow whitespace is enabled. The function removes trailing spaces and tabs from unquoted fields but fails to stop at the start of the...

PT-2026-116173

Name of the Vulnerable Software and Affected Versions Text::CSV XS versions prior to 1.65 Description The parse function incorrectly handles input that ends with a separator followed by a lone carriage return CR. In such cases, the parser treats the end of the input as the subsequent character an...

PT-2026-116170

Name of the Vulnerable Software and Affected Versions Text::CSV XS versions prior to 1.65 Description An issue exists in the print function where the end of a record and its line ending are dropped when a UTF-8 flagged field precedes invalid UTF-8 bytes. During buffer flushes, the system holds ba...

PT-2026-116171

Name of the Vulnerable Software and Affected Versions Text::CSV XS versions prior to 1.65 Description An issue exists where record splitting can occur when writing strings used as numbers without quotes in the combine function. The combine and print functions fail to verify if a field requires...

PT-2026-116168

Name of the Vulnerable Software and Affected Versions Text::CSV XS versions prior to 1.65 Description An issue exists where the getline function fails to free the array or the fields parsed before a syntax error occurs. While the function normally returns a reference to the record array upon...

PT-2026-116166

Name of the Vulnerable Software and Affected Versions Text::CSV XS versions prior to 1.65 Description An issue exists where memory exhaustion can occur due to the allocation of one entry per index of an RFC 7111 selector within the fragment function. The fragment function expands row= or col=...

PT-2026-116167

Name of the Vulnerable Software and Affected Versions Text::CSV XS versions 1.46 through 1.64 Description A use-after-free issue exists when skip empty rows skips an empty line in the getline function. When using bind columns, the parser writes fields into the caller's scalar without taking a...

PT-2026-116169

Name of the Vulnerable Software and Affected Versions Text::CSV XS versions prior to 1.65 Description Processing CSV input with carriage return CR only line endings using the getline function can lead to quadratic CPU usage. When the eol variable is unset, the parser treats CR-only input as a...

PT-2026-90712

Text::CSV XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption...

CVE-2026-7111

Text::CSVXS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption. The Parse, print, getline, and getlineall methods invoke registered callbacks for example afterparse, beforeprint, or...

SUSE SLED15 / SLES15 Security Update : perl-Text-CSV_XS (SUSE-SU-2026:1936-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:1936-1 advisory. This update for perl-Text-CSVXS fixes the following issue - CVE-2026-7111: use-after-free when registered callbacks...

Security update for perl-Text-CSV_XS

This update for perl-Text-CSVXS fixes the following issue CVE-2026-7111: use-after-free when registered callbacks extend the Perl argument stack may enable type confusion or memory corruption bsc1263690. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods...

SUSE-SU-2026:1936-1 Security update for perl-Text-CSV_XS

This update for perl-Text-CSVXS fixes the following issue - CVE-2026-7111: use-after-free when registered callbacks extend the Perl argument stack may enable type confusion or memory corruption bsc1263690...

OPENSUSE-SU-2026:10774-1 perl-Text-CSV_XS-1.620.0-1.1 on GA media

These are all security issues fixed in the perl-Text-CSVXS-1.620.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:20708-1 Security update for perl-Text-CSV_XS

This update for perl-Text-CSVXS fixes the following issue: - CVE-2026-7111: use-after-free when registered callbacks extend the Perl argument stack may enable type confusion or memory corruption bsc1263690...

SUSE CVE-2026-7111

Text::CSVXS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption. The Parse, print, getline, and getlineall methods invoke registered callbacks for example afterparse, beforeprint, or...

Linux Distros Unpatched Vulnerability : CVE-2026-7111

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Text::CSVXS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or...

CVE-2026-7111

Text::CSVXS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption. The Parse, print, getline, and getlineall methods invoke registered callbacks for example afterparse, beforeprint, or...

CVE-2026-7111 Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption

Text::CSVXS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption. The Parse, print, getline, and getlineall methods invoke registered callbacks for example afterparse, beforeprint, or...

CVE-2026-7111

Text::CSVXS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption. The Parse, print, getline, and getlineall methods invoke registered callbacks for example afterparse, beforeprint, or...