Perl

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenSep 17, 2026
Last mentionedSep 22, 2026

Timeline

3 articles · newest first

CVE-2026-87080: Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decode_punycode

Net::IDN::Punycode::PP Perl module before 2.590 decodes truncated punycode labels into names containing characters that were never encoded.

oss-securitySep 22, 15:52 UTC · Sep 22, 2026Vulnerability 8 sourcesCVE-2026-870801 · 1 read

CVE-2026-73639: Imager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a tRNS transparency chunk in read_direct8

Perl module Imager::File::PNG before 1.004 writes past the end of the row buffer when reading PNGs with a tRNS transparency chunk.

oss-securitySep 17, 22:08 UTC · Sep 17, 2026Vulnerability 2 sourcesCVE-2026-736392 · 1 read

CVE-2026-73638: Imager versions from 0.45_02 before 1.035 for Perl read outside the EXIF block via unchecked start offsets in tiff_load_ifd

Perl image library Imager before 1.035 reads outside the EXIF block via unchecked start offsets in tiff_load_ifd, fixed in 1.035.

oss-securitySep 17, 22:06 UTC · Sep 17, 2026Vulnerability 2 sourcesCVE-2026-736381 · 1 read

Related CVEs

by mentions

CVE-2026-870809.1
IDN Label Mismatch Vulnerability in Perl Punycode Decoder
published Sep 22, 2026Perl CPAN Net::IDN::Punycode::PP
CVE-2026-736399.1
Heap buffer overflow in Imager::File::PNG Perl module when reading PNGs with tRNS chunks
published Sep 17, 2026Imager project (CPAN) Imager::File::PNG
CVE-2026-736386.2
Out-of-bounds read in Perl Imager TIFF/EXIF parser (tiff_load_ifd)
published Sep 17, 2026Imager (Perl module) Imager

Appears with

Imagervendor · 2
Imagerproduct · 1
Imager::File::PNGproduct · 1
Net::IDN::Encodeorganization · 1

Entities are extracted by the model from each article. First seen Sep 17, 2026, last mentioned Sep 22, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.