Browse CVEs

HIGH 8.4 CVE-2026-57432 Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack. S_measure_struc… Perl after 5.43.10 Fix from $1,9502026-07-13 CRITICAL 9.1 CVE-2026-13221 Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is co… Perl after 5.43.9 Fix from $2,3002026-07-13 CRITICAL 9.8 CVE-2026-14739 DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders. The fix for CVE-2026-… Dbi 1.650+ Fix from $2,3002026-07-07 CRITICAL 9.1 CVE-2026-14740 DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment. The preparse method normalises SQL … Dbi 1.650+ Fix from $2,3002026-07-07 HIGH 8.8 CVE-2026-14380 DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profi… Dbi 1.650+ Fix from $1,9502026-07-07 CRITICAL 9.8 CVE-2026-9698 DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleEr… Dbi 1.648+ Fix from $2,3002026-06-09 CRITICAL 9.8 CVE-2026-10879 DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders. The preparse method expands SQL pla… Dbi 1.648+ Fix from $2,3002026-06-05 CRITICAL 9.8 CVE-2026-8376 Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds. Perl_stu… Perl after 5.43.10 Fix from $2,3002026-05-26 CRITICAL 9.8 CVE-2026-4176 Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Z… Perl 5.40.4 / 5.42.2+ Fix from $2,3002026-03-29 HIGH 8.4 CVE-2024-56406 A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development version… Perl 5.38.4 / 5.40.2+ Fix from $1,9502025-04-13 HIGH 7.8 CVE-2023-47039 A vulnerability was found in Perl. This security issue occurs while Perl for Windows relies on the system path environment variable to find the shell… Perl 5.32.1+ Fix from $1,9502024-01-02 HIGH 7.8 CVE-2023-47038 A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an … Perl after 5.38.0 Fix from $1,9502023-12-18 CRITICAL 9.8 CVE-2022-48522 In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation. Perl No fix yet Fix from $2,3002023-08-22 HIGH 8.1 CVE-2023-31484 CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. Perl 2.35 / 5.38.0+ Fix from $1,9502023-04-29 HIGH 8.1 CVE-2023-31486 HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must… Perl 0.083 / 5.38.0+ Fix from $1,9502023-04-29 HIGH 7.8 CVE-2020-16156 CPAN 2.28 allows Signature Verification Bypass. Comprehensive Perl Archive Network No fix yet Fix from $1,9502021-12-13 MEDIUM 6.1 CVE-2014-10402 An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed … Dbi after 1.643 Fix from $1,6002020-09-16 HIGH 7.1 CVE-2020-14393 A buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause an … Database Interface 1.643+ Fix from $1,9502020-09-16 MEDIUM 5.5 CVE-2020-14392 An untrusted pointer dereference flaw was found in Perl-DBI < 1.643. A local attacker who is able to manipulate calls to dbd_db_login6_sv() could cau… Database Interface 1.643+ Fix from $1,6002020-09-16 MEDIUM 6.1 CVE-2014-10401 An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from folders other than those specifically passed v… Dbi 1.632+ Fix from $1,6002020-09-11 MEDIUM 5.3 CVE-2013-7490 An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods for Callbacks may lead to memory corruption. Dbi 1.632+ Fix from $1,6002020-09-11 MEDIUM 5.3 CVE-2013-7491 An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user-defined function requires a non-trivial amount o… Dbi 1.628+ Fix from $1,6002020-09-11 HIGH 7.5 CVE-2020-12723EPSS 6% regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls. Perl 5.30.3+ Fix from $1,9502020-06-05 HIGH 8.6 CVE-2020-10878 Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could l… Perl 5.30.3+ Fix from $1,9502020-06-05 HIGH 8.2 CVE-2020-10543EPSS 11% Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow. Perl 5.30.3+ Fix from $1,9502020-06-05 CRITICAL 9.8 CVE-2018-18311EPSS 12% Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations. Perl 5.26.3 / 5.28.1+ Fix from $2,3002018-12-07 CRITICAL 9.8 CVE-2018-18314EPSS 6% Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations. Perl 5.26.3+ Fix from $2,3002018-12-07 CRITICAL 9.1 CVE-2018-18313EPSS 10% Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory. Perl 5.26.3+ Fix from $2,3002018-12-07 CRITICAL 9.8 CVE-2018-18312EPSS 12% Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations. Perl 5.26.3 / 5.28.1+ Fix from $2,3002018-12-05 CRITICAL 9.8 CVE-2017-12814EPSS 7% Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 on Windows allows… Perl after 5.24.2 Fix from $2,3002017-09-28