CPAN

Search everything

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenNov 7, 2026
Last mentioned4d ago

Timeline

2 articles · newest first

RRD::CGI::Image before 0.01 blocks CGI via 'tz' parameter (CVE-2026-123776)

Passing a path in the 'tz' CGI query parameter blocks the Perl CGI process in versions through 0.01.

oss-securityNov 7, 18:55 UTC · 4d agoVulnerabilityCVE-2026-123776

SQL::Abstract before 2.000003 allows SQL injection via arrayref (CVE-2026-121265)

Passing an arrayref column value in insert and update statements enables SQL injection in SQL::Abstract before 2.000003.

oss-securityNov 7, 18:53 UTC · 4d agoVulnerabilityCVE-2026-121265

Related CVEs

by mentions

CVE-2026-121265<1%9.8
SQL Injection in SQL::Abstract before 2.000003
published 4d agoCPAN SQL::AbstractPoC
CVE-2026-1237769.8
Unvalidated TZ path in RRD::CGI::Image before 0.02 for Perl
published 4d agoPerl RRD::CGI::Image

Appears with

RRD::CGI::Imageproduct · 1
SQL::Abstractproduct · 1

Entities are extracted by the model from each article. First seen Nov 7, 2026, last mentioned 4d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.