Text::CSV_XS versions before 1.65 for Perl (8 CVEs)
Perl Text::CSV_XS before 1.65 has multiple flaws, including memory exhaustion, use-after-free, and data leakage.
48
- Mentions · 7d0
- Mentions · 30d2
- All mentions9
- First seenSep 8, 2026
- Last mentioned14d ago
Timeline
9 articles · newest firstCVE-2026-102505: Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i_gsampf_fp
Perl Imager before 1.037 has heap buffer overflow CVE-2026-102505 when fetching float samples from paletted images.
41
CVE-2026-85644: XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array reference
CVE-2026-85644: Perl XS::Parse::Infix 0.40 through 0.49 can treat a number as an array reference.
22
CVE-2026-88816: DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName
CVE-2026-88816: Perl DBI before 1.654 treats numeric FetchHashKeyName values as strings.
34
Re: CVE-2026-95831: Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL
CVE-2026-95831: malicious Crypt::SelfCertificate 1.01–1.05 runs Python from an obfuscated URL.
58
CVE-2026-95831: Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL
Crypt::SelfCertificate 1.01–1.05 for Perl contains malware that runs Python from an obfuscated URL.
66
USN-8736-2: Perl vulnerabilities
Ubuntu issued USN-8736-2 fixing two Perl regex flaws that could cause out-of-bounds heap access, denial of service, or security bypass on 24.04 LTS.
28
USN-8675-2: Perl vulnerabilities
Ubuntu issued USN-8675-2 fixing two Perl flaws (CVE-2026-12087, CVE-2026-13221) enabling information disclosure and regex-based security bypass on 26.04 LTS.
15
USN-8736-1: Perl vulnerabilities
Ubuntu issued USN-8736-1 fixing two Perl regex flaws that could cause denial of service, code execution, or security-restriction bypass.
25
Related CVEs
by mentions- Embedded Malware in Perl CPAN Module Crypt::SelfCertificate 1.01–1.05
- CVE-2026-15534<1%5.7Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch
- CVE-2026-19487<1%5.3Perl regex engine flaw yields incorrect match results via stale failure flag
- Use-after-free in Perl Text::CSV_XS bind_columns
- CVE-2026-12087<1%9.1Socket versions before 2.041 for Perl have an out-of-bounds heap read
- CVE-2026-13221<1%9.1Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an…
- Memory exhaustion in Perl Text::CSV_XS before 1.65
- Type-confusion crash in Perl DBI before 1.654
- Type confusion crash in Perl XS::Parse::Infix 0.40–0.49
- Heap buffer overflow in Imager Perl image library before 1.037
Appears with
- Ubuntuvendor · 3
- Canonicalvendor · 3
- Canonicalorganization · 2
- Crypt::SelfCertificateproduct · 2
- MetaCPANorganization · 2
- Ubuntuorganization · 1
- DBIproduct · 1
- Text::CSV_XSproduct · 1
- XS::Parse::Infixproduct · 1
- Perlvendor · 1
- Imagerproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.