CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

Perl — security advisories

9 advisorieslatest 2026-07-09⚡ RSS feed

Tracked Perl products:

Perl Socket libhttp-daemon-perl DBI Bytes::Random::Secure

⚡ Watch Perl

Get an email when a new Perl advisory drops — max one per day, one-click unsubscribe.

[UPDATE] [medium] Perl: Vulnerability allows code execution and information disclosure

mediumCVE-2025-40909cert-bund2026-07-09

[UPDATE] [medium] Perl: Vulnerability allows unspecified attack

mediumCVE-2026-8376cert-bund2026-07-02

CVE-2026-14380: DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile

highCVSS 8.8CVE-2026-14380msrc2026-07-02

CVE-2026-14739: DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders

highCVSS 8.6CVE-2026-14739msrc2026-07-02

DSA-6358-1 libhttp-daemon-perl - security update

unknownCVE-2026-8450debian2026-06-21

CVE-2026-10879: DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders

highCVSS 8.6CVE-2026-10879msrc2026-06-09

CVE-2026-9698: DBI versions before 1.648 for Perl saved errors in a limited-sized buffer

highCVSS 8.8CVE-2026-9698msrc2026-06-09

CVE-2026-11625: Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes

highCVSS 7.5CVE-2026-11625msrc2026-06-09

CVE-2026-12087: Socket versions before 2.041 for Perl have an out-of-bounds heap read

criticalCVSS 9.1CVE-2026-12087msrc2026-06-09