CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

Perl — security advisories

25 advisorieslatest 2026-08-25⚡ RSS feed

Tracked Perl products:

Perl Socket libhttp-daemon-perl DBI Bytes::Random::Secure DBD::File DBI::ProfileData Storable DBI::SQL::Nano libnet-dns-perl

⚡ Watch Perl

Get an email when a new Perl advisory drops — max one per day, one-click unsubscribe.

USN-8675-1: Perl vulnerabilities

unknownCVE-2026-12087 CVE-2026-13221 CVE-2026-57432 CVE-2026-57433ubuntu2026-08-25

[UPDATE] [medium] Perl: Vulnerability allows code execution and information disclosure

mediumCVE-2025-40909cert-bund2026-08-24

[NEW] [medium] Perl: Vulnerability enables denial of service

mediumCVE-2026-60075cert-bund2026-08-24

DSA-6459-1 libnet-dns-perl - security update

unknownCVE-2026-64193 CVE-2026-64194debian2026-08-22

[NEW] [medium] Perl: Vulnerability enables denial of service

mediumCVE-2026-15534cert-bund2026-08-18

[NEW] [medium] Perl: Multiple vulnerabilities

mediumCVE-2026-13221 CVE-2026-57432cert-bund2026-08-17

[UPDATE] [medium] Perl: Vulnerability allows unspecified attack

mediumCVE-2026-8376cert-bund2026-08-17

[NEW] [medium] Perl: Vulnerability enables denial of service

mediumCVE-2026-19487cert-bund2026-08-14

CVE-2026-19487: Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass

mediumCVSS 5.3CVE-2026-19487msrc2026-08-11

CVE-2026-15534: Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch

mediumCVSS 5.7CVE-2026-15534msrc2026-08-11

[NEW] [medium] Perl: Vulnerability allows denial of service

mediumCVE-2026-8177cert-bund2026-07-22

CVE-2026-13221: Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk

mediumCVSS 4CVE-2026-13221msrc2026-07-14

CVE-2026-15392: DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location

highCVSS 7.7CVE-2026-15392msrc2026-07-14

CVE-2026-60081: DBI::ProfileData versions before 1.651 for Perl do not limit the path index

highCVSS 7.5CVE-2026-60081msrc2026-07-14

CVE-2026-57433: Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record

criticalCVSS 9.8CVE-2026-57433msrc2026-07-14

CVE-2026-15043: DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted = SQL operators on text

criticalCVSS 9.8CVE-2026-15043msrc2026-07-14

CVE-2026-14739: DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders

highCVSS 8.6CVE-2026-14739msrc2026-07-14

CVE-2026-14380: DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile

highCVSS 8.8CVE-2026-14380msrc2026-07-14

CVE-2026-57432: Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack

highCVSS 7.5CVE-2026-57432msrc2026-07-14

CVE-2026-60082: DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row

criticalCVSS 9.1CVE-2026-60082msrc2026-07-14

DSA-6358-1 libhttp-daemon-perl - security update

unknownCVE-2026-8450debian2026-06-21

CVE-2026-9698: DBI versions before 1.648 for Perl saved errors in a limited-sized buffer

highCVSS 8.8CVE-2026-9698msrc2026-06-09

CVE-2026-10879: DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders

highCVSS 8.6CVE-2026-10879msrc2026-06-09

CVE-2026-11625: Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes

highCVSS 7.5CVE-2026-11625msrc2026-06-09

CVE-2026-12087: Socket versions before 2.041 for Perl have an out-of-bounds heap read

criticalCVSS 9.1CVE-2026-12087msrc2026-06-09