CPAN

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenSep 7, 2026
Last mentionedSep 23, 2026

Timeline

3 articles · newest first

Re: CVE-2026-95831: Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL

CPAN removed Crypt::SelfCertificate 1.01–1.05 after CVE-2026-95831 identified a Python dropper.

oss-securitySep 23, 15:05 UTC · Sep 23, 2026MalwareExploitedCVE-2026-958312 · 1 read

CVE-2026-16028: Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes from the connection stream table

CVE-2026-16028: Protocol::HTTP2 Perl library before 1.14 lets closed streams linger in the connection table, enabling remote memory exhaustion.

oss-securitySep 7, 18:45 UTC · Sep 7, 2026VulnerabilityCVE-2026-160281 · 1 read

CVE-2026-86287: Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths

CVE-2026-86287: Net::IP::LPM Perl library before 1.12 accepts malformed IP prefix lengths, risking incorrect longest-prefix-match results.

oss-securitySep 7, 18:40 UTC · Sep 7, 2026VulnerabilityCVE-2026-862871

Related CVEs

by mentions

CVE-2026-958317.8
Embedded Malware in Perl CPAN Module Crypt::SelfCertificate 1.01–1.05
published Sep 22, 2026CPAN (Perl distribution, author unattributed in advisory) Crypt::SelfCertificate
CVE-2026-86287<1%7.5
Improper Input Validation in Net::IP::LPM Perl Module Lets Bad Masks Poison Lookups
published Sep 7, 2026CPAN (Perl) Net::IP::LPM
CVE-2026-16028<1%7.5
Memory exhaustion DoS in Protocol::HTTP2 Perl module before 1.14
published Sep 7, 2026CPAN (Perl) Protocol::HTTP2

Appears with

Protocol::HTTP2product · 1
Net::IP::LPMproduct · 1
CPANSecorganization · 1
Crypt::SelfCertificateproduct · 1

Entities are extracted by the model from each article. First seen Sep 7, 2026, last mentioned Sep 23, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.