perl
OSS Librariesoss-project
Top products
Latest CVEs
The 15 most recently published vulnerabilities affecting perl.
- CVE-2026-13221Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk9.1
- CVE-2026-57432Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack8.4
- CVE-2026-14740DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment9.1
- CVE-2026-14739DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders9.8
- CVE-2026-14380DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile8.8
- CVE-2026-9698DBI versions before 1.648 for Perl saved errors in a limited-sized buffer9.8
- CVE-2026-10879DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders9.8
- CVE-2026-8376Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds9.8
- CVE-2026-4176Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib9.8
- CVE-2025-40909Perl threads have a working directory race condition where file operations may target unintended paths5.9
- CVE-2024-56406Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes8.4
- CVE-2025-1828Perl's Crypt::Random module after 1.05 and before 1.56 may use rand() function for cryptographic functions8.8
- CVE-2023-47039Perl: perl for windows binary hijacking vulnerability7.8
- CVE-2023-47038Perl: write past buffer end via illegal user-defined unicode property7.0
- CVE-2022-48522In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.9.8