Every CVE Search/ Get API key

CVE-2026-48962

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob

7.3 HighPublic exploitFix available

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.

_parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl.

Arbitrary Perl in the output glob executes at the calling process's privilege.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

0.44%Up 0.4 points since May 27, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.3

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.

_parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl.

Arbitrary Perl in the output glob executes at the calling process's privilege.

Record
CVE-2026-48962
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-95, CWE-94
Updated
2026-11-02
EUVDEUVD-2026-32048 7.8

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.

_parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl.

Arbitrary Perl in the output glob executes at the calling process's privilege.

Record
EUVD-2026-32048
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-q6wx-vhvq-x7h6 7.3

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an...

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.

_parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl.

Arbitrary Perl in the output glob executes at the calling process's privilege.

Record
GHSA-q6wx-vhvq-x7h6
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness
CWE-94, CWE-95
Updated
2026-11-02
NVD 7.3

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.

_parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl.

Arbitrary Perl in the output glob executes at the calling process's privilege.

Record
CVE-2026-48962
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-95, CWE-94
Updated
2026-11-02
OSVALPINE-CVE-2026-48962 7.3

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.

_parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl.

Arbitrary Perl in the output glob executes at the calling process's privilege.

Record
ALPINE-CVE-2026-48962
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-03
OSVBELL-CVE-2026-48962 7.3
Record
BELL-CVE-2026-48962
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
Show 39 moreShow less
OSV 7.3

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.

_parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl.

Arbitrary Perl in the output glob executes at the calling process's privilege.

Record
CVE-2026-48962
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness
CWE-95
Updated
2026-11-02
OSVDEBIAN-CVE-2026-48962 7.3

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob. _parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl. Arbitrary Perl in the output glob executes at the calling process's privilege.

Record
DEBIAN-CVE-2026-48962
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVOESA-2026-2610 7.3

perl-IO-Compress security update

This distribution provides a Perl interface to allow reading and writing of compressed data created with the zlib and bzip2 libraries.

Security Fix(es):

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.

_parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl.

Arbitrary Perl in the output glob executes at the calling process's privilege.(CVE-2026-48962)

Record
OESA-2026-2610
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVOESA-2026-2652 7.3

perl-IO-Compress security update

This distribution provides a Perl interface to allow reading and writing of compressed data created with the zlib and bzip2 libraries.

Security Fix(es):

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.

_parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl.

Arbitrary Perl in the output glob executes at the calling process's privilege.(CVE-2026-48962)

Record
OESA-2026-2652
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVOESA-2026-2653 7.3

perl-IO-Compress security update

This distribution provides a Perl interface to allow reading and writing of compressed data created with the zlib and bzip2 libraries.

Security Fix(es):

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.

_parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl.

Arbitrary Perl in the output glob executes at the calling process's privilege.(CVE-2026-48962)

Record
OESA-2026-2653
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVOESA-2026-2654 7.3

perl-IO-Compress security update

This distribution provides a Perl interface to allow reading and writing of compressed data created with the zlib and bzip2 libraries.

Security Fix(es):

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.

_parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl.

Arbitrary Perl in the output glob executes at the calling process's privilege.(CVE-2026-48962)

Record
OESA-2026-2654
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2026:29182 7.8

Red Hat Security Advisory: perl-IO-Compress security update

Record
RHSA-2026:29182
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:29210 7.8

Red Hat Security Advisory: perl-IO-Compress security update

Record
RHSA-2026:29210
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:29867 7.8

Red Hat Security Advisory: perl-IO-Compress security update

Record
RHSA-2026:29867
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:29941 7.8

Red Hat Security Advisory: perl-IO-Compress security update

Record
RHSA-2026:29941
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:30085 7.8

Red Hat Security Advisory: perl-IO-Compress security update

Record
RHSA-2026:30085
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:30086 7.8

Red Hat Security Advisory: perl-IO-Compress security update

Record
RHSA-2026:30086
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:30115 7.8

Red Hat Security Advisory: perl-IO-Compress security update

Record
RHSA-2026:30115
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:30843 7.8

Red Hat Security Advisory: perl-IO-Compress security update

Record
RHSA-2026:30843
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:30851 8.2

Red Hat Security Advisory: perl:5.32 security update

Record
RHSA-2026:30851
CVSS 3.1
8.2 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:30858 7.8

Red Hat Security Advisory: perl-IO-Compress security update

Record
RHSA-2026:30858
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:30859 7.8

Red Hat Security Advisory: perl-IO-Compress security update

Record
RHSA-2026:30859
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:30860 7.8

Red Hat Security Advisory: perl-IO-Compress security update

Record
RHSA-2026:30860
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:50262 7.8

Red Hat Security Advisory: perl:5.32 security update

Record
RHSA-2026:50262
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:30851 8.2

Important: perl:5.32 security update

Perl is a high-level programming language that is commonly used for system administration utilities and web programming.

Security Fix(es):

  • perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access (CVE-2026-42496)

  • perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob (CVE-2026-48962)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:30851
CVSS 3.1
8.2 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:30858 7.8

Important: perl-IO-Compress security update

This distribution provides a Perl interface to allow reading and writing of compressed data created with the zlib and bzip2 libraries. IO-Compress supports reading and writing of bzip2, RFC 1950, RFC 1951, RFC 1952 (i.e. gzip) and zip files/buffers. The following modules used to be distributed separately, but are now included with the IO-Compress distribution:

  • Compress-Zlib
  • IO-Compress-Zlib
  • IO-Compress-Bzip2
  • IO-Compress-Base

Security Fix(es):

  • perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob (CVE-2026-48962)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:30858
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:30859 7.8

Important: perl-IO-Compress security update

This distribution provides a Perl interface to allow reading and writing of compressed data created with the zlib and bzip2 libraries. IO-Compress supports reading and writing of bzip2, RFC 1950, RFC 1951, RFC 1952 (i.e. gzip) and zip files/buffers. The following modules used to be distributed separately, but are now included with the IO-Compress distribution:

  • Compress-Zlib
  • IO-Compress-Zlib
  • IO-Compress-Bzip2
  • IO-Compress-Base

Security Fix(es):

  • perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob (CVE-2026-48962)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:30859
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:30860 7.8

Important: perl-IO-Compress security update

This distribution provides a Perl interface to allow reading and writing of compressed data created with the zlib and bzip2 libraries. IO-Compress supports reading and writing of bzip2, RFC 1950, RFC 1951, RFC 1952 (i.e. gzip) and zip files/buffers. The following modules used to be distributed separately, but are now included with the IO-Compress distribution:

  • Compress-Zlib
  • IO-Compress-Zlib
  • IO-Compress-Bzip2
  • IO-Compress-Base

Security Fix(es):

  • perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob (CVE-2026-48962)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:30860
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-48962 7.8

CVE-2026-48962 in perl - Patched by Root

Root has patched CVE-2026-48962 in the perl package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-48962
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-48962 7.8

CVE-2026-48962 in perl - Patched by Root

Root has patched CVE-2026-48962 in the perl package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-48962
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-48962 7.8

CVE-2026-48962 in perl - Patched by Root

Root has patched CVE-2026-48962 in the perl package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2026-48962
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-48962 7.3

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob. _parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl. Arbitrary Perl in the output glob executes at the calling process's privilege.

Record
UBUNTU-CVE-2026-48962
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:30851 No score

Important: perl:5.32 security update

Perl is a high-level programming language that is commonly used for system administration utilities and web programming.

Security Fix(es):

  • perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access (CVE-2026-42496)
  • perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob (CVE-2026-48962)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:30851
Updated
2026-11-02
OSVALSA-2026:30858 No score

Important: perl-IO-Compress security update

This distribution provides a Perl interface to allow reading and writing of compressed data created with the zlib and bzip2 libraries. IO-Compress supports reading and writing of bzip2, RFC 1950, RFC 1951, RFC 1952 (i.e. gzip) and zip files/buffers. The following modules used to be distributed separately, but are now included with the IO-Compress distribution:

  • Compress-Zlib
  • IO-Compress-Zlib
  • IO-Compress-Bzip2
  • IO-Compress-Base

Security Fix(es):

  • perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob (CVE-2026-48962)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:30858
Updated
2026-11-02
OSVALSA-2026:30859 No score

Important: perl-IO-Compress security update

This distribution provides a Perl interface to allow reading and writing of compressed data created with the zlib and bzip2 libraries. IO-Compress supports reading and writing of bzip2, RFC 1950, RFC 1951, RFC 1952 (i.e. gzip) and zip files/buffers. The following modules used to be distributed separately, but are now included with the IO-Compress distribution:

  • Compress-Zlib
  • IO-Compress-Zlib
  • IO-Compress-Bzip2
  • IO-Compress-Base

Security Fix(es):

  • perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob (CVE-2026-48962)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:30859
Updated
2026-11-02
OSVALSA-2026:30860 No score

Important: perl-IO-Compress security update

This distribution provides a Perl interface to allow reading and writing of compressed data created with the zlib and bzip2 libraries. IO-Compress supports reading and writing of bzip2, RFC 1950, RFC 1951, RFC 1952 (i.e. gzip) and zip files/buffers. The following modules used to be distributed separately, but are now included with the IO-Compress distribution:

  • Compress-Zlib
  • IO-Compress-Zlib
  • IO-Compress-Bzip2
  • IO-Compress-Base

Security Fix(es):

  • perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob (CVE-2026-48962)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:30860
Updated
2026-11-02
OSVAZL-89280 No score

CVE-2026-48962 affecting package perl for versions less than 5.38.2-512

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.

_parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl.

Arbitrary Perl in the output glob executes at the calling process's privilege.

Record
AZL-89280
Updated
2026-11-05
OSVCLSA-2026-1782898054 No score

perl-IO-Compress: Fix of CVE-2026-48962

  • CVE-2026-48962: fix eval injection in File::GlobMapper allowing arbitrary Perl code execution via an attacker-controlled output glob
Record
CLSA-2026-1782898054
Updated
2026-11-02
OSVCLSA-2026-1782898846 No score

perl-IO-Compress: Fix of CVE-2026-48962

  • CVE-2026-48962: fix eval injection in File::GlobMapper allowing arbitrary Perl code execution via an attacker-controlled output glob
Record
CLSA-2026-1782898846
Updated
2026-11-02
OSVCLSA-2026-1786471358 No score

Fix CVE(s): CVE-2026-42496, CVE-2026-48962

  • SECURITY UPDATE: Archive::Tar extracted symlinks and hardlinks with attacker-controlled targets outside the extraction directory
    • debian/patches/fixes/CVE-2026-42496.patch: reject absolute and '..'-traversing link targets in Archive::Tar::_make_special_file() unless $Archive::Tar::INSECURE_EXTRACT_MODE is set
    • CVE-2026-42496
  • SECURITY UPDATE: arbitrary code execution in File::GlobMapper via an attacker-controlled output glob
    • debian/patches/fixes/CVE-2026-48962.patch: replace the eval STRING in File::GlobMapper::_getFiles() with explicit substitution of internal wildcard markers, so no part of the output glob is evaluated as Perl
    • CVE-2026-48962
Record
CLSA-2026-1786471358
Updated
2026-11-02
OSVMGASA-2026-0158 No score

Updated perl-IO-Compress package fixes security vulnerabilities

The updated package fixes security vulnerabilities: IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date. (CVE-2025-15649) IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward. (CVE-2026-48959) IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob. (CVE-2026-48962)

Record
MGASA-2026-0158
Updated
2026-11-02
OSVopenSUSE-SU-2026:10939-1 No score

perl-IO-Compress-2.220.0-1.1 on GA media

These are all security issues fixed in the perl-IO-Compress-2.220.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10939-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21177-1 No score

Security update for perl-IO-Compress

This update for perl-IO-Compress fixes the following issues:

Changes in perl-IO-Compress:

  • updated to 2.220.0 (2.220) see /usr/share/doc/packages/perl-IO-Compress/Changes

    2.220 16 May 2026 * remove use of eval in globmapper. #73 CVE-2026-48962 bsc#1266382 * Update zipdetails to version 4.006. CVE-2026-48961 bsc#1266381 * Fix typo in fastForward #72 * Fix issue with "rawdeflate` option in AnyInflate. #71

  • updated to 2.219.0 (2.219) see /usr/share/doc/packages/perl-IO-Compress/Changes

    2.219 9 March 2026 * Fix a few typos * Squash repeated semicolons * Make dependent version checking consistent amd update module to version 2.219. Fixes #70 2.218 8 March 2026 * Refresh zipdetails to version 4.005 Sourced from https://github.com/pmqs/zipdetails * version 2.218 * Add SECURITY.md, Fixes #69 * fix spelling typo * Refresh Changes file * Update release date in README * Refresh zipdetails from https://github.com/pmqs/zipdetails 2.217 1 February 2026 * Update release date in README * Refresh zipdetails from https://github.com/pmqs/zipdetails * Delete GZIP environment variable before running interop tests Fixes #24 * Update version to 2.217 2.216 31 January 2026 * Update version to 2.216 * IO::Compress @2.215: t/006zip.t fails due to missing test files #67 2.215 31 January 2026 * Fix version check in 000prereq.t * Update Changes for 2.215 * Update version to 2.215 & change copyright year to 2026 * Add tests for handling zero and invalid datetime values in unzip functionality. Fix for #65 * Enhance _dosToUnixTime to handle zero and invalid datetime values; add tests for edge cases. Fixes #65

  • updated to 2.214.0 (2.214) see /usr/share/doc/packages/perl-IO-Compress/Changes

    2.214 24 October 2025 * version 2.214 * IO::Compress::Gzip accidentally modifies the $EXPORT_TAGS{all}->@* of other modules Fixes #64 * Fix indentation in Windows workflow YAML * Fix indentation in windows.yml exclude section * Merge pull request #63 from masiuchi/fix/ci-errors * Exclude Perl 5.42 with "strawberry" distribution from GitHub Actions * Update FreeBSD image to 14.3 in Cirrus CI * Add dependabot.yml file to police workflow files * Add perl 5.42 to workflow files * Fix for https://github.com/pmqs/Compress-Raw-Zlib/issues/34 * #59 fix typos in streamzip

Record
openSUSE-SU-2026:21177-1
Updated
2026-11-02
OSVUSN-8684-1 No score

perl vulnerabilities

It was discovered that Perl incorrectly handled certain arguments to Socket and pack/unpack functions. An attacker could possibly use this issue to read sensitive information from memory. (CVE-2026-12087, CVE-2026-57432)

It was discovered that Perl incorrectly handled regular expressions with a large number of alternation branches. An attacker could possibly use this issue to cause incorrect matching results. (CVE-2026-13221)

It was discovered that Perl incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-57433, CVE-2025-15649, CVE-2026-48959, CVE-2026-9538)

It was discovered that Perl incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. (CVE-2026-48962)

It was discovered that Perl incorrectly handled credential headers during cross-origin redirects in HTTP::Tiny. An attacker could possibly use this issue to expose sensitive information. (CVE-2026-7017)

Record
USN-8684-1
Updated
2026-11-02

Affected products

Show 3 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
perl
Alpine:v3.24
 before 5.42.3-r0
5.42.3-r0
perl
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4:5.32.1-474.module_el8.10.0+4162+0aac7c4c
4:5.32.1-474.module_el8.10.0+4162+0aac7c4c
perl-Algorithm-Diff
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.1903-10.module_el8.6.0+2766+8bf0b7ce
1.1903-10.module_el8.6.0+2766+8bf0b7ce
perl-Archive-Tar
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.38-4.module_el8.10.0+4205+6175afda
2.38-4.module_el8.10.0+4205+6175afda
perl-Archive-Zip
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.68-3.module_el8.6.0+2766+8bf0b7ce
1.68-3.module_el8.6.0+2766+8bf0b7ce
perl-Attribute-Handlers
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.01-474.module_el8.10.0+4162+0aac7c4c
1.01-474.module_el8.10.0+4162+0aac7c4c
perl-AutoLoader
AlmaLinux:8
From an advisory covering 2 CVEs
 before 5.74-474.module_el8.10.0+4162+0aac7c4c
5.74-474.module_el8.10.0+4162+0aac7c4c
perl-AutoSplit
AlmaLinux:8
From an advisory covering 2 CVEs
 before 5.74-474.module_el8.10.0+4162+0aac7c4c
5.74-474.module_el8.10.0+4162+0aac7c4c
perl-B
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.80-474.module_el8.10.0+4162+0aac7c4c
1.80-474.module_el8.10.0+4162+0aac7c4c
perl-Benchmark
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.23-474.module_el8.10.0+4162+0aac7c4c
1.23-474.module_el8.10.0+4162+0aac7c4c
Show 290 moreShow less
Affected packages
PackageAffectedFixed
perl-CPAN
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.28-5.module_el8.6.0+2766+8bf0b7ce
2.28-5.module_el8.6.0+2766+8bf0b7ce
perl-CPAN-DistnameInfo
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.12-13.module_el8.6.0+2766+8bf0b7ce
0.12-13.module_el8.6.0+2766+8bf0b7ce
perl-CPAN-Meta
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.150010-397.module_el8.6.0+2766+8bf0b7ce
2.150010-397.module_el8.6.0+2766+8bf0b7ce
perl-CPAN-Meta-Requirements
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.140-397.module_el8.6.0+2766+8bf0b7ce
2.140-397.module_el8.6.0+2766+8bf0b7ce
perl-CPAN-Meta-YAML
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.018-1001.module_el8.6.0+2766+8bf0b7ce
0.018-1001.module_el8.6.0+2766+8bf0b7ce
perl-Carp
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.50-439.module_el8.6.0+2766+8bf0b7ce
1.50-439.module_el8.6.0+2766+8bf0b7ce
perl-Class-Struct
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.66-474.module_el8.10.0+4162+0aac7c4c
0.66-474.module_el8.10.0+4162+0aac7c4c
perl-Compress-Bzip2
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.28-2.module_el8.6.0+3181+91434291
2.28-2.module_el8.6.0+3181+91434291
perl-Compress-Bzip2
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.28-2.module_el8.6.0+2766+8bf0b7ce
2.28-2.module_el8.6.0+2766+8bf0b7ce
perl-Compress-Raw-Bzip2
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.096-1.module_el8.6.0+2766+8bf0b7ce
2.096-1.module_el8.6.0+2766+8bf0b7ce
perl-Compress-Raw-Bzip2
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.096-1.module_el8.6.0+3181+91434291
2.096-1.module_el8.6.0+3181+91434291
perl-Compress-Raw-Lzma
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.096-1.module_el8.6.0+2766+8bf0b7ce
2.096-1.module_el8.6.0+2766+8bf0b7ce
perl-Compress-Raw-Lzma
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.096-1.module_el8.6.0+3181+91434291
2.096-1.module_el8.6.0+3181+91434291
perl-Compress-Raw-Zlib
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.096-2.module_el8.10.0+3779+d5938d28
2.096-2.module_el8.10.0+3779+d5938d28
perl-Config-Extensions
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.03-474.module_el8.10.0+4162+0aac7c4c
0.03-474.module_el8.10.0+4162+0aac7c4c
perl-Config-Perl-V
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.32-441.module_el8.6.0+2766+8bf0b7ce
0.32-441.module_el8.6.0+2766+8bf0b7ce
perl-DBM_Filter
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.06-474.module_el8.10.0+4162+0aac7c4c
0.06-474.module_el8.10.0+4162+0aac7c4c
perl-DB_File
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.855-1.module_el8.6.0+2766+8bf0b7ce
1.855-1.module_el8.6.0+2766+8bf0b7ce
perl-DB_File
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.855-1.module_el8.6.0+3181+91434291
1.855-1.module_el8.6.0+3181+91434291
perl-Data-Dumper
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.174-440.module_el8.6.0+3181+91434291
2.174-440.module_el8.6.0+3181+91434291
perl-Data-Dumper
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.174-440.module_el8.6.0+2766+8bf0b7ce
2.174-440.module_el8.6.0+2766+8bf0b7ce
perl-Data-OptList
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.110-7.module_el8.6.0+2766+8bf0b7ce
0.110-7.module_el8.6.0+2766+8bf0b7ce
perl-Data-Section
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.200007-8.module_el8.6.0+2766+8bf0b7ce
0.200007-8.module_el8.6.0+2766+8bf0b7ce
perl-Devel-PPPort
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.62-1.module_el8.6.0+3181+91434291
3.62-1.module_el8.6.0+3181+91434291
perl-Devel-PPPort
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.62-1.module_el8.6.0+2766+8bf0b7ce
3.62-1.module_el8.6.0+2766+8bf0b7ce
perl-Devel-Peek
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.28-474.module_el8.10.0+4162+0aac7c4c
1.28-474.module_el8.10.0+4162+0aac7c4c
perl-Devel-SelfStubber
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.06-474.module_el8.10.0+4162+0aac7c4c
1.06-474.module_el8.10.0+4162+0aac7c4c
perl-Devel-Size
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.83-3.module_el8.6.0+2766+8bf0b7ce
0.83-3.module_el8.6.0+2766+8bf0b7ce
perl-Devel-Size
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.83-3.module_el8.6.0+3181+91434291
0.83-3.module_el8.6.0+3181+91434291
perl-Digest
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.20-1.module_el8.6.0+2766+8bf0b7ce
1.20-1.module_el8.6.0+2766+8bf0b7ce
perl-Digest-MD5
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.58-1.module_el8.6.0+2766+8bf0b7ce
2.58-1.module_el8.6.0+2766+8bf0b7ce
perl-Digest-MD5
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.58-1.module_el8.6.0+3181+91434291
2.58-1.module_el8.6.0+3181+91434291
perl-Digest-SHA
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1:6.02-2.module_el8.6.0+2766+8bf0b7ce
1:6.02-2.module_el8.6.0+2766+8bf0b7ce
perl-Digest-SHA
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1:6.02-2.module_el8.6.0+3181+91434291
1:6.02-2.module_el8.6.0+3181+91434291
perl-DirHandle
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.05-474.module_el8.10.0+4162+0aac7c4c
1.05-474.module_el8.10.0+4162+0aac7c4c
perl-Dumpvalue
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.27-474.module_el8.10.0+4162+0aac7c4c
2.27-474.module_el8.10.0+4162+0aac7c4c
perl-DynaLoader
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.47-474.module_el8.10.0+4162+0aac7c4c
1.47-474.module_el8.10.0+4162+0aac7c4c
perl-Encode
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4:3.08-461.module_el8.6.0+3181+91434291
4:3.08-461.module_el8.6.0+3181+91434291
perl-Encode
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4:3.08-461.module_el8.6.0+2766+8bf0b7ce
4:3.08-461.module_el8.6.0+2766+8bf0b7ce
perl-Encode-Locale
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.05-10.module_el8.6.0+2766+8bf0b7ce
1.05-10.module_el8.6.0+2766+8bf0b7ce
perl-Encode-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4:3.08-461.module_el8.6.0+3181+91434291
4:3.08-461.module_el8.6.0+3181+91434291
perl-Encode-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4:3.08-461.module_el8.6.0+2766+8bf0b7ce
4:3.08-461.module_el8.6.0+2766+8bf0b7ce
perl-English
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.11-474.module_el8.10.0+4162+0aac7c4c
1.11-474.module_el8.10.0+4162+0aac7c4c
perl-Env
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.04-396.module_el8.6.0+2766+8bf0b7ce
1.04-396.module_el8.6.0+2766+8bf0b7ce
perl-Errno
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.30-474.module_el8.10.0+4162+0aac7c4c
1.30-474.module_el8.10.0+4162+0aac7c4c
perl-Exporter
AlmaLinux:8
From an advisory covering 2 CVEs
 before 5.74-458.module_el8.6.0+2766+8bf0b7ce
5.74-458.module_el8.6.0+2766+8bf0b7ce
perl-ExtUtils-CBuilder
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1:0.280236-1.module_el8.6.0+2766+8bf0b7ce
1:0.280236-1.module_el8.6.0+2766+8bf0b7ce
perl-ExtUtils-Command
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2:7.46-3.module_el8.6.0+2766+8bf0b7ce
2:7.46-3.module_el8.6.0+2766+8bf0b7ce
perl-ExtUtils-Constant
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.25-474.module_el8.10.0+4162+0aac7c4c
0.25-474.module_el8.10.0+4162+0aac7c4c
perl-ExtUtils-Embed
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.35-474.module_el8.10.0+4162+0aac7c4c
1.35-474.module_el8.10.0+4162+0aac7c4c
perl-ExtUtils-Install
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.20-1.module_el8.6.0+2766+8bf0b7ce
2.20-1.module_el8.6.0+2766+8bf0b7ce
perl-ExtUtils-MM-Utils
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2:7.46-3.module_el8.6.0+2766+8bf0b7ce
2:7.46-3.module_el8.6.0+2766+8bf0b7ce
perl-ExtUtils-MakeMaker
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2:7.46-3.module_el8.6.0+2766+8bf0b7ce
2:7.46-3.module_el8.6.0+2766+8bf0b7ce
perl-ExtUtils-Manifest
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1:1.73-1.module_el8.6.0+2766+8bf0b7ce
1:1.73-1.module_el8.6.0+2766+8bf0b7ce
perl-ExtUtils-Miniperl
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.09-474.module_el8.10.0+4162+0aac7c4c
1.09-474.module_el8.10.0+4162+0aac7c4c
perl-ExtUtils-ParseXS
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1:3.40-439.module_el8.6.0+2766+8bf0b7ce
1:3.40-439.module_el8.6.0+2766+8bf0b7ce
perl-Fcntl
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.13-474.module_el8.10.0+4162+0aac7c4c
1.13-474.module_el8.10.0+4162+0aac7c4c
perl-Fedora-VSP
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.001-10.module_el8.6.0+2766+8bf0b7ce
0.001-10.module_el8.6.0+2766+8bf0b7ce
perl-File-Basename
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.85-474.module_el8.10.0+4162+0aac7c4c
2.85-474.module_el8.10.0+4162+0aac7c4c
perl-File-Compare
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.100.600-474.module_el8.10.0+4162+0aac7c4c
1.100.600-474.module_el8.10.0+4162+0aac7c4c
perl-File-Copy
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.34-474.module_el8.10.0+4162+0aac7c4c
2.34-474.module_el8.10.0+4162+0aac7c4c
perl-File-DosGlob
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.12-474.module_el8.10.0+4162+0aac7c4c
1.12-474.module_el8.10.0+4162+0aac7c4c
perl-File-Fetch
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.00-1.module_el8.6.0+2766+8bf0b7ce
1.00-1.module_el8.6.0+2766+8bf0b7ce
perl-File-Find
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.37-474.module_el8.10.0+4162+0aac7c4c
1.37-474.module_el8.10.0+4162+0aac7c4c
perl-File-HomeDir
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.004-6.module_el8.6.0+2766+8bf0b7ce
1.004-6.module_el8.6.0+2766+8bf0b7ce
perl-File-Path
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.16-439.module_el8.6.0+2766+8bf0b7ce
2.16-439.module_el8.6.0+2766+8bf0b7ce
perl-File-Temp
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1:0.231.100-1.module_el8.6.0+2766+8bf0b7ce
1:0.231.100-1.module_el8.6.0+2766+8bf0b7ce
perl-File-Which
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.23-4.module_el8.6.0+2766+8bf0b7ce
1.23-4.module_el8.6.0+2766+8bf0b7ce
perl-File-stat
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.09-474.module_el8.10.0+4162+0aac7c4c
1.09-474.module_el8.10.0+4162+0aac7c4c
perl-FileCache
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.10-474.module_el8.10.0+4162+0aac7c4c
1.10-474.module_el8.10.0+4162+0aac7c4c
perl-FileHandle
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.03-474.module_el8.10.0+4162+0aac7c4c
2.03-474.module_el8.10.0+4162+0aac7c4c
perl-Filter
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2:1.60-1.module_el8.6.0+2766+8bf0b7ce
2:1.60-1.module_el8.6.0+2766+8bf0b7ce
perl-Filter
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2:1.60-1.module_el8.6.0+3181+91434291
2:1.60-1.module_el8.6.0+3181+91434291
perl-Filter-Simple
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.96-457.module_el8.6.0+2766+8bf0b7ce
0.96-457.module_el8.6.0+2766+8bf0b7ce
perl
Azure Linux:3
 before 5.38.2-512
5.38.2-512
perl
Alpaquita:23
 5.36.0-r0 up to 5.36.3-r2
5.36.3-r2
perl
Alpaquita:25
 5.40.2-r0 up to 5.40.4-r1
5.40.4-r1
perl
Alpaquita:stream
 5.36.0-r0 up to 5.42.2-r1
5.42.2-r1
perl
BellSoft Hardened Containers:23
 5.36.0-r0 up to 5.36.3-r2
5.36.3-r2
perl
BellSoft Hardened Containers:25
 5.40.2-r0 up to 5.40.4-r1
5.40.4-r1
perl
BellSoft Hardened Containers:stream
 5.36.0-r0 up to 5.42.2-r1
5.42.2-r1
perl-IO-Compress
TuxCare:AlmaLinux:9.2
 before 2.102-4.el9.tuxcare.els1
2.102-4.el9.tuxcare.els1
perl-IO-Compress-tests
TuxCare:AlmaLinux:9.2
 before 2.102-4.el9.tuxcare.els1
2.102-4.el9.tuxcare.els1
perl-IO-Compress
TuxCare:AlmaLinux:9.6
 before 2.102-4.el9.tuxcare.els1
2.102-4.el9.tuxcare.els1
perl-IO-Compress-tests
TuxCare:AlmaLinux:9.6
 before 2.102-4.el9.tuxcare.els1
2.102-4.el9.tuxcare.els1
libperl-dev
TuxCare:Debian:10
From an advisory covering 2 CVEs
 before 5.28.1-6+deb10u1+tuxcare.els5
5.28.1-6+deb10u1+tuxcare.els5
libperl5.28
TuxCare:Debian:10
From an advisory covering 2 CVEs
 before 5.28.1-6+deb10u1+tuxcare.els5
5.28.1-6+deb10u1+tuxcare.els5
perl
TuxCare:Debian:10
From an advisory covering 2 CVEs
 before 5.28.1-6+deb10u1+tuxcare.els5
5.28.1-6+deb10u1+tuxcare.els5
perl-base
TuxCare:Debian:10
From an advisory covering 2 CVEs
 before 5.28.1-6+deb10u1+tuxcare.els5
5.28.1-6+deb10u1+tuxcare.els5
perl-debug
TuxCare:Debian:10
From an advisory covering 2 CVEs
 before 5.28.1-6+deb10u1+tuxcare.els5
5.28.1-6+deb10u1+tuxcare.els5
perl-doc
TuxCare:Debian:10
From an advisory covering 2 CVEs
 before 5.28.1-6+deb10u1+tuxcare.els5
5.28.1-6+deb10u1+tuxcare.els5
perl-modules-5.28
TuxCare:Debian:10
From an advisory covering 2 CVEs
 before 5.28.1-6+deb10u1+tuxcare.els5
5.28.1-6+deb10u1+tuxcare.els5
libio-compress-perl
Debian:12
 before 2.204-1+deb12u1, plus listed versions
2.204-1
2.204-1+deb12u1
libio-compress-perl
Debian:13
 before 2.213-1+deb13u1, plus listed versions
2.213-1
2.213-1+deb13u1
libio-compress-perl
Debian:14
 before 2.220-1, plus listed versions
2.213-12.214-12.217-12.219-12.219-2
2.220-1
perl
Debian:12
 before 5.36.0-7+deb12u4, plus listed versions
5.36.0-75.36.0-7+deb12u15.36.0-7+deb12u25.36.0-7+deb12u3
5.36.0-7+deb12u4
perl
Debian:13
 before 5.40.1-6+deb13u1, plus listed versions
5.40.1-6
5.40.1-6+deb13u1
perl
Debian:14
 before 5.40.1-8, plus listed versions
5.40.1-65.40.1-7
5.40.1-8
perl-IO-Compress
Mageia:9
From an advisory covering 4 CVEs
 before 2.204.0-1.1.mga9
2.204.0-1.1.mga9
perl-IO-Compress
openEuler:24.03-LTS-SP3
 before 2.206-2.oe2403sp3
2.206-2.oe2403sp3
perl-IO-Compress
openEuler:20.03-LTS-SP4
 before 2.095-3.oe2003sp4
2.095-3.oe2003sp4
perl-IO-Compress
openEuler:22.03-LTS-SP4
 before 2.201-5.oe2203sp4
2.201-5.oe2203sp4
perl-IO-Compress
openEuler:24.03-LTS-SP1
 before 2.206-3.oe2403sp1
2.206-3.oe2403sp1
perl-IO-Compress
Red Hat:rhel_e4s:9.4::appstream
 before 0:2.102-4.el9_4.1
0:2.102-4.el9_4.1
perl-IO-Compress
Red Hat:rhel_e4s:9.2::appstream
 before 0:2.102-4.el9_2.1
0:2.102-4.el9_2.1
perl-IO-Compress
Red Hat:rhel_aus:8.4::baseos
 before 0:2.081-1.el8_4.1
0:2.081-1.el8_4.1
perl-IO-Compress
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:2.081-1.el8_4.1
0:2.081-1.el8_4.1
perl-IO-Compress
Red Hat:enterprise_linux_eus:10.0
 before 0:2.212-512.el10_0.1
0:2.212-512.el10_0.1
perl-IO-Compress
Red Hat:rhel_eus:9.6::appstream
 before 0:2.102-4.el9_6.1
0:2.102-4.el9_6.1
perl-IO-Compress
Red Hat:rhel_e4s:8.8::baseos
 before 0:2.081-1.el8_8.1
0:2.081-1.el8_8.1
perl-IO-Compress
Red Hat:rhel_tus:8.8::baseos
 before 0:2.081-1.el8_8.1
0:2.081-1.el8_8.1
perl-IO-Compress
Red Hat:rhel_aus:8.6::baseos
 before 0:2.081-1.el8_6.1
0:2.081-1.el8_6.1
perl-IO-Compress
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:2.081-1.el8_6.1
0:2.081-1.el8_6.1
perl-IO-Compress
Red Hat:rhel_els:7
 before 0:2.061-2.el7_9.1
0:2.061-2.el7_9.1
perl
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 4:5.32.1-474.module+el8.10.0+24099+8aa2f756
4:5.32.1-474.module+el8.10.0+24099+8aa2f756
perl-Algorithm-Diff
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.1903-10.module+el8.10.0+21354+3ad137bb
0:1.1903-10.module+el8.10.0+21354+3ad137bb
perl-Archive-Tar
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.38-4.module+el8.10.0+24402+ce90c7a0
0:2.38-4.module+el8.10.0+24402+ce90c7a0
perl-Archive-Zip
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.68-3.module+el8.10.0+21354+3ad137bb
0:1.68-3.module+el8.10.0+21354+3ad137bb
perl-Attribute-Handlers
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.01-474.module+el8.10.0+24099+8aa2f756
0:1.01-474.module+el8.10.0+24099+8aa2f756
perl-AutoLoader
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:5.74-474.module+el8.10.0+24099+8aa2f756
0:5.74-474.module+el8.10.0+24099+8aa2f756
perl-AutoSplit
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:5.74-474.module+el8.10.0+24099+8aa2f756
0:5.74-474.module+el8.10.0+24099+8aa2f756
perl-B
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.80-474.module+el8.10.0+24099+8aa2f756
0:1.80-474.module+el8.10.0+24099+8aa2f756
perl-B-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.80-474.module+el8.10.0+24099+8aa2f756
0:1.80-474.module+el8.10.0+24099+8aa2f756
perl-Benchmark
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.23-474.module+el8.10.0+24099+8aa2f756
0:1.23-474.module+el8.10.0+24099+8aa2f756
perl-CPAN
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.28-5.module+el8.10.0+21354+3ad137bb
0:2.28-5.module+el8.10.0+21354+3ad137bb
perl-CPAN-DistnameInfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.12-13.module+el8.10.0+21354+3ad137bb
0:0.12-13.module+el8.10.0+21354+3ad137bb
perl-CPAN-Meta
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.150010-397.module+el8.10.0+21354+3ad137bb
0:2.150010-397.module+el8.10.0+21354+3ad137bb
perl-CPAN-Meta-Requirements
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.140-397.module+el8.10.0+21354+3ad137bb
0:2.140-397.module+el8.10.0+21354+3ad137bb
perl-CPAN-Meta-YAML
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.018-1001.module+el8.10.0+21354+3ad137bb
0:0.018-1001.module+el8.10.0+21354+3ad137bb
perl-Carp
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.50-439.module+el8.10.0+21354+3ad137bb
0:1.50-439.module+el8.10.0+21354+3ad137bb
perl-Class-Struct
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.66-474.module+el8.10.0+24099+8aa2f756
0:0.66-474.module+el8.10.0+24099+8aa2f756
perl-Compress-Bzip2
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.28-2.module+el8.10.0+21354+3ad137bb
0:2.28-2.module+el8.10.0+21354+3ad137bb
perl-Compress-Bzip2-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.28-2.module+el8.10.0+21354+3ad137bb
0:2.28-2.module+el8.10.0+21354+3ad137bb
perl-Compress-Bzip2-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.28-2.module+el8.10.0+21354+3ad137bb
0:2.28-2.module+el8.10.0+21354+3ad137bb
perl-Compress-Raw-Bzip2
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.096-1.module+el8.10.0+21354+3ad137bb
0:2.096-1.module+el8.10.0+21354+3ad137bb
perl-Compress-Raw-Bzip2-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.096-1.module+el8.10.0+21354+3ad137bb
0:2.096-1.module+el8.10.0+21354+3ad137bb
perl-Compress-Raw-Bzip2-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.096-1.module+el8.10.0+21354+3ad137bb
0:2.096-1.module+el8.10.0+21354+3ad137bb
perl-Compress-Raw-Lzma
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.096-1.module+el8.10.0+21354+3ad137bb
0:2.096-1.module+el8.10.0+21354+3ad137bb
perl-Compress-Raw-Lzma-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.096-1.module+el8.10.0+21354+3ad137bb
0:2.096-1.module+el8.10.0+21354+3ad137bb
perl-Compress-Raw-Lzma-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.096-1.module+el8.10.0+21354+3ad137bb
0:2.096-1.module+el8.10.0+21354+3ad137bb
perl-Compress-Raw-Zlib
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.096-2.module+el8.10.0+21354+3ad137bb
0:2.096-2.module+el8.10.0+21354+3ad137bb
perl-Compress-Raw-Zlib-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.096-2.module+el8.10.0+21354+3ad137bb
0:2.096-2.module+el8.10.0+21354+3ad137bb
perl-Compress-Raw-Zlib-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.096-2.module+el8.10.0+21354+3ad137bb
0:2.096-2.module+el8.10.0+21354+3ad137bb
perl-Config-Extensions
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.03-474.module+el8.10.0+24099+8aa2f756
0:0.03-474.module+el8.10.0+24099+8aa2f756
perl-Config-Perl-V
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.32-441.module+el8.10.0+21354+3ad137bb
0:0.32-441.module+el8.10.0+21354+3ad137bb
perl-DBM_Filter
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.06-474.module+el8.10.0+24099+8aa2f756
0:0.06-474.module+el8.10.0+24099+8aa2f756
perl-DB_File
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.855-1.module+el8.10.0+21354+3ad137bb
0:1.855-1.module+el8.10.0+21354+3ad137bb
perl-DB_File-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.855-1.module+el8.10.0+21354+3ad137bb
0:1.855-1.module+el8.10.0+21354+3ad137bb
perl-DB_File-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.855-1.module+el8.10.0+21354+3ad137bb
0:1.855-1.module+el8.10.0+21354+3ad137bb
perl-Data-Dumper
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.174-440.module+el8.10.0+21354+3ad137bb
0:2.174-440.module+el8.10.0+21354+3ad137bb
perl-Data-Dumper-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.174-440.module+el8.10.0+21354+3ad137bb
0:2.174-440.module+el8.10.0+21354+3ad137bb
perl-Data-Dumper-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.174-440.module+el8.10.0+21354+3ad137bb
0:2.174-440.module+el8.10.0+21354+3ad137bb
perl-Data-OptList
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.110-7.module+el8.10.0+21354+3ad137bb
0:0.110-7.module+el8.10.0+21354+3ad137bb
perl-Data-Section
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.200007-8.module+el8.10.0+21354+3ad137bb
0:0.200007-8.module+el8.10.0+21354+3ad137bb
perl-Devel-PPPort
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.62-1.module+el8.10.0+21354+3ad137bb
0:3.62-1.module+el8.10.0+21354+3ad137bb
perl-Devel-PPPort-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.62-1.module+el8.10.0+21354+3ad137bb
0:3.62-1.module+el8.10.0+21354+3ad137bb
perl-Devel-PPPort-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.62-1.module+el8.10.0+21354+3ad137bb
0:3.62-1.module+el8.10.0+21354+3ad137bb
perl-Devel-Peek
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.28-474.module+el8.10.0+24099+8aa2f756
0:1.28-474.module+el8.10.0+24099+8aa2f756
perl-Devel-Peek-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.28-474.module+el8.10.0+24099+8aa2f756
0:1.28-474.module+el8.10.0+24099+8aa2f756
perl-Devel-SelfStubber
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.06-474.module+el8.10.0+24099+8aa2f756
0:1.06-474.module+el8.10.0+24099+8aa2f756
perl-Devel-Size
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.83-3.module+el8.10.0+21354+3ad137bb
0:0.83-3.module+el8.10.0+21354+3ad137bb
perl-Devel-Size-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.83-3.module+el8.10.0+21354+3ad137bb
0:0.83-3.module+el8.10.0+21354+3ad137bb
perl-Devel-Size-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.83-3.module+el8.10.0+21354+3ad137bb
0:0.83-3.module+el8.10.0+21354+3ad137bb
perl-Digest
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.20-1.module+el8.10.0+21354+3ad137bb
0:1.20-1.module+el8.10.0+21354+3ad137bb
perl-Digest-MD5
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.58-1.module+el8.10.0+21354+3ad137bb
0:2.58-1.module+el8.10.0+21354+3ad137bb
perl-Digest-MD5-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.58-1.module+el8.10.0+21354+3ad137bb
0:2.58-1.module+el8.10.0+21354+3ad137bb
perl-Digest-MD5-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.58-1.module+el8.10.0+21354+3ad137bb
0:2.58-1.module+el8.10.0+21354+3ad137bb
perl-Digest-SHA
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 1:6.02-2.module+el8.10.0+21354+3ad137bb
1:6.02-2.module+el8.10.0+21354+3ad137bb
perl-Digest-SHA-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 1:6.02-2.module+el8.10.0+21354+3ad137bb
1:6.02-2.module+el8.10.0+21354+3ad137bb
perl-Digest-SHA-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 1:6.02-2.module+el8.10.0+21354+3ad137bb
1:6.02-2.module+el8.10.0+21354+3ad137bb
perl-DirHandle
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.05-474.module+el8.10.0+24099+8aa2f756
0:1.05-474.module+el8.10.0+24099+8aa2f756
perl-Dumpvalue
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.27-474.module+el8.10.0+24099+8aa2f756
0:2.27-474.module+el8.10.0+24099+8aa2f756
perl-DynaLoader
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.47-474.module+el8.10.0+24099+8aa2f756
0:1.47-474.module+el8.10.0+24099+8aa2f756
perl-DynaLoader-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.47-474.module+el8.10.0+24099+8aa2f756
0:1.47-474.module+el8.10.0+24099+8aa2f756
perl-Encode
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 4:3.08-461.module+el8.10.0+21354+3ad137bb
4:3.08-461.module+el8.10.0+21354+3ad137bb
perl-Encode-Locale
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.05-10.module+el8.10.0+21354+3ad137bb
0:1.05-10.module+el8.10.0+21354+3ad137bb
perl-Encode-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 4:3.08-461.module+el8.10.0+21354+3ad137bb
4:3.08-461.module+el8.10.0+21354+3ad137bb
perl-Encode-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 4:3.08-461.module+el8.10.0+21354+3ad137bb
4:3.08-461.module+el8.10.0+21354+3ad137bb
perl-Encode-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 4:3.08-461.module+el8.10.0+21354+3ad137bb
4:3.08-461.module+el8.10.0+21354+3ad137bb
perl-English
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.11-474.module+el8.10.0+24099+8aa2f756
0:1.11-474.module+el8.10.0+24099+8aa2f756
perl-Env
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.04-396.module+el8.10.0+21354+3ad137bb
0:1.04-396.module+el8.10.0+21354+3ad137bb
perl-Errno
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.30-474.module+el8.10.0+24099+8aa2f756
0:1.30-474.module+el8.10.0+24099+8aa2f756
perl-Exporter
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:5.74-458.module+el8.10.0+21354+3ad137bb
0:5.74-458.module+el8.10.0+21354+3ad137bb
perl-ExtUtils-CBuilder
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 1:0.280236-1.module+el8.10.0+21354+3ad137bb
1:0.280236-1.module+el8.10.0+21354+3ad137bb
perl-ExtUtils-Command
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 2:7.46-3.module+el8.10.0+21354+3ad137bb
2:7.46-3.module+el8.10.0+21354+3ad137bb
perl-ExtUtils-Constant
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.25-474.module+el8.10.0+24099+8aa2f756
0:0.25-474.module+el8.10.0+24099+8aa2f756
perl
Rocky Linux:8
From an advisory covering 2 CVEs
 before 4:5.32.1-474.module+el8.10.0+40155+64ce2d41
4:5.32.1-474.module+el8.10.0+40155+64ce2d41
perl-Algorithm-Diff
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.1903-10.module+el8.10.0+40155+64ce2d41
0:1.1903-10.module+el8.10.0+40155+64ce2d41
perl-Algorithm-Diff
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.1903-10.module+el8.6.0+878+f93dfff7
0:1.1903-10.module+el8.6.0+878+f93dfff7
perl-Algorithm-Diff
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.1903-10.module+el8.6.0+882+2fa1e48f
0:1.1903-10.module+el8.6.0+882+2fa1e48f
perl-Algorithm-Diff
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.1903-10.module+el8.10.0+1616+0d20cc68
0:1.1903-10.module+el8.10.0+1616+0d20cc68
perl-Archive-Zip
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.68-3.module+el8.10.0+40155+64ce2d41
0:1.68-3.module+el8.10.0+40155+64ce2d41
perl-Archive-Zip
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.68-3.module+el8.10.0+1616+0d20cc68
0:1.68-3.module+el8.10.0+1616+0d20cc68
perl-autodie
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.34-1.module+el8.10.0+1616+0d20cc68
0:2.34-1.module+el8.10.0+1616+0d20cc68
perl-autodie
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.34-1.module+el8.10.0+40155+64ce2d41
0:2.34-1.module+el8.10.0+40155+64ce2d41
perl-bignum
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.51-439.module+el8.6.0+878+f93dfff7
0:0.51-439.module+el8.6.0+878+f93dfff7
perl-bignum
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.51-439.module+el8.10.0+40155+64ce2d41
0:0.51-439.module+el8.10.0+40155+64ce2d41
perl-bignum
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.51-439.module+el8.10.0+1616+0d20cc68
0:0.51-439.module+el8.10.0+1616+0d20cc68
perl-Carp
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.50-439.module+el8.10.0+40155+64ce2d41
0:1.50-439.module+el8.10.0+40155+64ce2d41
perl-Carp
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.50-439.module+el8.10.0+1616+0d20cc68
0:1.50-439.module+el8.10.0+1616+0d20cc68
perl-Carp
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.50-439.module+el8.6.0+878+f93dfff7
0:1.50-439.module+el8.6.0+878+f93dfff7
perl-Compress-Bzip2
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.28-2.module+el8.10.0+40155+64ce2d41
0:2.28-2.module+el8.10.0+40155+64ce2d41
perl-Compress-Bzip2
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.28-2.module+el8.10.0+1616+0d20cc68
0:2.28-2.module+el8.10.0+1616+0d20cc68
perl-Compress-Raw-Bzip2
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.096-1.module+el8.10.0+1616+0d20cc68
0:2.096-1.module+el8.10.0+1616+0d20cc68
perl-Compress-Raw-Bzip2
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.096-1.module+el8.10.0+40155+64ce2d41
0:2.096-1.module+el8.10.0+40155+64ce2d41
perl-Compress-Raw-Lzma
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.096-1.module+el8.10.0+1616+0d20cc68
0:2.096-1.module+el8.10.0+1616+0d20cc68
perl-Compress-Raw-Lzma
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.096-1.module+el8.10.0+40155+64ce2d41
0:2.096-1.module+el8.10.0+40155+64ce2d41
perl-Compress-Raw-Zlib
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.096-2.module+el8.10.0+1753+8441f55f
0:2.096-2.module+el8.10.0+1753+8441f55f
perl-Compress-Raw-Zlib
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.096-2.module+el8.10.0+40155+64ce2d41
0:2.096-2.module+el8.10.0+40155+64ce2d41
perl-Config-Perl-V
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.32-441.module+el8.10.0+1616+0d20cc68
0:0.32-441.module+el8.10.0+1616+0d20cc68
perl-Config-Perl-V
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.32-441.module+el8.10.0+40155+64ce2d41
0:0.32-441.module+el8.10.0+40155+64ce2d41
perl-Config-Perl-V
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.32-441.module+el8.6.0+878+f93dfff7
0:0.32-441.module+el8.6.0+878+f93dfff7
perl-constant
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.33-1001.module+el8.10.0+40155+64ce2d41
0:1.33-1001.module+el8.10.0+40155+64ce2d41
perl-constant
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.33-1001.module+el8.10.0+1616+0d20cc68
0:1.33-1001.module+el8.10.0+1616+0d20cc68
perl-constant
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.33-1001.module+el8.6.0+878+f93dfff7
0:1.33-1001.module+el8.6.0+878+f93dfff7
perl-constant
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.33-1001.module+el8.6.0+882+2fa1e48f
0:1.33-1001.module+el8.6.0+882+2fa1e48f
perl-CPAN
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.28-5.module+el8.10.0+1616+0d20cc68
0:2.28-5.module+el8.10.0+1616+0d20cc68
perl-CPAN
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.28-5.module+el8.10.0+40155+64ce2d41
0:2.28-5.module+el8.10.0+40155+64ce2d41
perl-CPAN-DistnameInfo
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.12-13.module+el8.9.0+1491+a1bcd037
0:0.12-13.module+el8.9.0+1491+a1bcd037
perl-CPAN-DistnameInfo
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.12-13.module+el8.10.0+40155+64ce2d41
0:0.12-13.module+el8.10.0+40155+64ce2d41
perl-CPAN-DistnameInfo
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.12-13.module+el8.6.0+878+f93dfff7
0:0.12-13.module+el8.6.0+878+f93dfff7
perl-CPAN-DistnameInfo
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.12-13.module+el8.9.0+1491+219f8fe7
0:0.12-13.module+el8.9.0+1491+219f8fe7
perl-CPAN-DistnameInfo
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.12-13.module+el8.10.0+1890+281b551b
0:0.12-13.module+el8.10.0+1890+281b551b
perl-CPAN-DistnameInfo
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.12-13.module+el8.10.0+1890+318cbfb5
0:0.12-13.module+el8.10.0+1890+318cbfb5
perl-CPAN-DistnameInfo
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.12-13.module+el8.10.0+1616+0d20cc68
0:0.12-13.module+el8.10.0+1616+0d20cc68
perl-CPAN-DistnameInfo
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.12-13.module+el8.9.0+1491+3507a112
0:0.12-13.module+el8.9.0+1491+3507a112
perl-CPAN-DistnameInfo
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.12-13.module+el8.10.0+1890+1072d5cf
0:0.12-13.module+el8.10.0+1890+1072d5cf
perl-CPAN-Meta
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.150010-397.module+el8.10.0+1616+0d20cc68
0:2.150010-397.module+el8.10.0+1616+0d20cc68
perl-CPAN-Meta
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.150010-397.module+el8.10.0+40155+64ce2d41
0:2.150010-397.module+el8.10.0+40155+64ce2d41
perl-CPAN-Meta
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.150010-397.module+el8.6.0+878+f93dfff7
0:2.150010-397.module+el8.6.0+878+f93dfff7
perl-CPAN-Meta
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.150010-397.module+el8.6.0+882+2fa1e48f
0:2.150010-397.module+el8.6.0+882+2fa1e48f
perl-CPAN-Meta-Requirements
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.140-397.module+el8.10.0+1616+0d20cc68
0:2.140-397.module+el8.10.0+1616+0d20cc68
perl-CPAN-Meta-Requirements
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.140-397.module+el8.6.0+878+f93dfff7
0:2.140-397.module+el8.6.0+878+f93dfff7
perl-CPAN-Meta-Requirements
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.140-397.module+el8.10.0+40155+64ce2d41
0:2.140-397.module+el8.10.0+40155+64ce2d41
perl-CPAN-Meta-Requirements
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.140-397.module+el8.6.0+882+2fa1e48f
0:2.140-397.module+el8.6.0+882+2fa1e48f
perl-CPAN-Meta-YAML
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.018-1001.module+el8.6.0+882+2fa1e48f
0:0.018-1001.module+el8.6.0+882+2fa1e48f
perl-CPAN-Meta-YAML
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.018-1001.module+el8.10.0+1616+0d20cc68
0:0.018-1001.module+el8.10.0+1616+0d20cc68
perl-CPAN-Meta-YAML
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.018-1001.module+el8.6.0+878+f93dfff7
0:0.018-1001.module+el8.6.0+878+f93dfff7
perl-CPAN-Meta-YAML
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.018-1001.module+el8.10.0+40155+64ce2d41
0:0.018-1001.module+el8.10.0+40155+64ce2d41
perl-Data-Dumper
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.174-440.module+el8.10.0+1616+0d20cc68
0:2.174-440.module+el8.10.0+1616+0d20cc68
perl-Data-Dumper
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.174-440.module+el8.6.0+878+f93dfff7
0:2.174-440.module+el8.6.0+878+f93dfff7
perl-Data-Dumper
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.174-440.module+el8.10.0+40155+64ce2d41
0:2.174-440.module+el8.10.0+40155+64ce2d41
perl-Data-OptList
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.110-7.module+el8.10.0+40155+64ce2d41
0:0.110-7.module+el8.10.0+40155+64ce2d41
perl-Data-OptList
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.110-7.module+el8.6.0+882+2fa1e48f
0:0.110-7.module+el8.6.0+882+2fa1e48f
perl-Data-OptList
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.110-7.module+el8.10.0+1616+0d20cc68
0:0.110-7.module+el8.10.0+1616+0d20cc68
perl-Data-OptList
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.110-7.module+el8.6.0+878+f93dfff7
0:0.110-7.module+el8.6.0+878+f93dfff7
perl-Data-Section
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.200007-8.module+el8.10.0+1616+0d20cc68
0:0.200007-8.module+el8.10.0+1616+0d20cc68
perl-Data-Section
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.200007-8.module+el8.10.0+40155+64ce2d41
0:0.200007-8.module+el8.10.0+40155+64ce2d41
perl-Data-Section
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.200007-8.module+el8.6.0+878+f93dfff7
0:0.200007-8.module+el8.6.0+878+f93dfff7
perl-DB_File
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.855-1.module+el8.10.0+40155+64ce2d41
0:1.855-1.module+el8.10.0+40155+64ce2d41
perl-DB_File
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.855-1.module+el8.10.0+1616+0d20cc68
0:1.855-1.module+el8.10.0+1616+0d20cc68
perl-Devel-PPPort
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:3.62-1.module+el8.10.0+1616+0d20cc68
0:3.62-1.module+el8.10.0+1616+0d20cc68
perl-Devel-PPPort
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:3.62-1.module+el8.10.0+40155+64ce2d41
0:3.62-1.module+el8.10.0+40155+64ce2d41
perl-Devel-Size
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.83-3.module+el8.10.0+1616+0d20cc68
0:0.83-3.module+el8.10.0+1616+0d20cc68
perl-Devel-Size
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.83-3.module+el8.10.0+40155+64ce2d41
0:0.83-3.module+el8.10.0+40155+64ce2d41
perl-Devel-Size
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.83-3.module+el8.6.0+878+f93dfff7
0:0.83-3.module+el8.6.0+878+f93dfff7
perl-Digest
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.20-1.module+el8.10.0+40155+64ce2d41
0:1.20-1.module+el8.10.0+40155+64ce2d41
perl-Digest
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.20-1.module+el8.10.0+1616+0d20cc68
0:1.20-1.module+el8.10.0+1616+0d20cc68
perl-Digest-MD5
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.58-1.module+el8.10.0+40155+64ce2d41
0:2.58-1.module+el8.10.0+40155+64ce2d41
perl-Digest-MD5
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.58-1.module+el8.10.0+1616+0d20cc68
0:2.58-1.module+el8.10.0+1616+0d20cc68
perl-Digest-SHA
Rocky Linux:8
From an advisory covering 2 CVEs
 before 1:6.02-2.module+el8.6.0+882+2fa1e48f
1:6.02-2.module+el8.6.0+882+2fa1e48f
perl-Digest-SHA
Rocky Linux:8
From an advisory covering 2 CVEs
 before 1:6.02-2.module+el8.10.0+1616+0d20cc68
1:6.02-2.module+el8.10.0+1616+0d20cc68
perl-Digest-SHA
Rocky Linux:8
From an advisory covering 2 CVEs
 before 1:6.02-2.module+el8.6.0+878+f93dfff7
1:6.02-2.module+el8.6.0+878+f93dfff7
perl-Digest-SHA
Rocky Linux:8
From an advisory covering 2 CVEs
 before 1:6.02-2.module+el8.10.0+40155+64ce2d41
1:6.02-2.module+el8.10.0+40155+64ce2d41
perl-Encode
Rocky Linux:8
From an advisory covering 2 CVEs
 before 4:3.08-461.module+el8.10.0+40155+64ce2d41
4:3.08-461.module+el8.10.0+40155+64ce2d41
perl-Encode
Rocky Linux:8
From an advisory covering 2 CVEs
 before 4:3.08-461.module+el8.10.0+1616+0d20cc68
4:3.08-461.module+el8.10.0+1616+0d20cc68
perl-Encode-Locale
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.05-10.module+el8.10.0+40155+64ce2d41
0:1.05-10.module+el8.10.0+40155+64ce2d41
perl-Encode-Locale
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.05-10.module+el8.9.0+1521+faf8d1d6
0:1.05-10.module+el8.9.0+1521+faf8d1d6
perl
Root:Debian:11
 before 5.32.1-4+deb11u5.aikido.6
5.32.1-4+deb11u5.aikido.65.32.1-4+deb11u5.aikido.75.32.1-4+deb11u5.aikido.85.32.1-4+deb11u5.aikido.95.32.1-4+deb11u5.aikido.105.32.1-4+deb11u5.aikido.115.32.1-4+deb11u5.root.io.25.32.1-4+deb11u5.aikido.125.32.1-4+deb11u5.root.io.55.32.1-4+deb11u5.root.io.4
rootio-perl
Root:Debian:11
 before 5.32.1-4+deb11u5.aikido.6
5.32.1-4+deb11u5.aikido.65.32.1-4+deb11u5.aikido.75.32.1-4+deb11u5.aikido.85.32.1-4+deb11u5.aikido.95.32.1-4+deb11u5.aikido.105.32.1-4+deb11u5.aikido.115.32.1-4+deb11u5.root.io.25.32.1-4+deb11u5.aikido.125.32.1-4+deb11u5.root.io.55.32.1-4+deb11u5.root.io.4
perl
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
5.14.2-21build15.18.1-45.18.1-4build15.18.1-55.18.2-2
Show 12 moreShow less
5.18.2-2ubuntu15.18.2-2ubuntu1.15.18.2-2ubuntu1.35.18.2-2ubuntu1.45.18.2-2ubuntu1.65.18.2-2ubuntu1.75.18.2-2ubuntu1.7+esm35.18.2-2ubuntu1.7+esm45.18.2-2ubuntu1.7+esm55.18.2-2ubuntu1.7+esm75.18.2-2ubuntu1.7+esm85.18.2-2ubuntu1.7+esm9
 None known
perl
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
5.20.2-65.22.1-35.22.1-45.22.1-55.22.1-7
Show 11 moreShow less
5.22.1-85.22.1-95.22.1-9ubuntu0.25.22.1-9ubuntu0.35.22.1-9ubuntu0.55.22.1-9ubuntu0.65.22.1-9ubuntu0.95.22.1-9ubuntu0.9+esm15.22.1-9ubuntu0.9+esm25.22.1-9ubuntu0.9+esm35.22.1-9ubuntu0.9+esm4
 None known
libio-compress-perl
Ubuntu:16.04:LTS
 All versions, plus listed versions
2.068-22.069-1
 None known
perl
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.26.0-8ubuntu15.26.1-2ubuntu15.26.1-35.26.1-45.26.1-4build1
Show 11 moreShow less
5.26.1-55.26.1-65.26.1-6ubuntu0.15.26.1-6ubuntu0.25.26.1-6ubuntu0.35.26.1-6ubuntu0.55.26.1-6ubuntu0.65.26.1-6ubuntu0.75.26.1-6ubuntu0.7+esm25.26.1-6ubuntu0.7+esm35.26.1-6ubuntu0.7+esm4
 None known
libio-compress-perl
Ubuntu:18.04:LTS
 All versions, plus listed versions
2.074-1
 None known
perl
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.28.1-6build15.30.0-75.30.0-95.30.0-9build15.30.0-9ubuntu0.2
Show 6 moreShow less
5.30.0-9ubuntu0.35.30.0-9ubuntu0.45.30.0-9ubuntu0.55.30.0-9ubuntu0.5+esm25.30.0-9ubuntu0.5+esm35.30.0-9ubuntu0.5+esm4
 None known
libio-compress-perl
Ubuntu:20.04:LTS
 All versions, plus listed versions
2.087-12.089-12.090-12.093-1
 None known
libio-compress-perl
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.101-12.102-1
 None known
perl
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.32.1-3ubuntu35.34.0-3ubuntu15.34.0-3ubuntu1.15.34.0-3ubuntu1.25.34.0-3ubuntu1.3
Show 5 moreShow less
5.34.0-3ubuntu1.45.34.0-3ubuntu1.55.34.0-3ubuntu1.75.34.0-3ubuntu1.85.34.0-3ubuntu1.9
 None known
libio-compress-perl
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.206-12.207-1
 None known
perl
Ubuntu:24.04:LTS
 before 5.38.2-3.2ubuntu0.4, plus listed versions
5.36.0-9ubuntu15.36.0-10ubuntu15.38.2-35.38.2-3.25.38.2-3.2build1
Show 5 moreShow less
5.38.2-3.2build25.38.2-3.2build2.15.38.2-3.2ubuntu0.15.38.2-3.2ubuntu0.25.38.2-3.2ubuntu0.3
5.38.2-3.2ubuntu0.4
libio-compress-perl
Ubuntu:25.10
 All versions, plus listed versions
2.213-1
 None known
perl
Ubuntu:25.10
 All versions, plus listed versions
5.40.1-25.40.1-35.40.1-55.40.1-65.40.1-6build15.40.1-6ubuntu0.1
 None known
libio-compress-perl
Ubuntu:26.10
 All versions, plus listed versions
2.217-12.220-12.221-12.223-1
 None known
perl
Ubuntu:26.10
 All versions, plus listed versions
5.40.1-7build15.40.1-85.40.1-8ubuntu15.42.3-1
 None known
libio-compress-perl
Ubuntu:26.04:LTS
 All versions, plus listed versions
2.213-12.214-12.217-1
 None known
perl
Ubuntu:26.04:LTS
 All versions, plus listed versions
5.40.1-6build15.40.1-7build15.40.1-7ubuntu0.15.40.1-7ubuntu0.25.40.1-7ubuntu0.3
 None known
perl
Ubuntu:24.04:LTS
From an advisory covering 9 CVEs
 before 5.38.2-3.2ubuntu0.4, plus listed versions
5.36.0-9ubuntu15.36.0-10ubuntu15.38.2-35.38.2-3.25.38.2-3.2build1
Show 5 moreShow less
5.38.2-3.2build25.38.2-3.2build2.15.38.2-3.2ubuntu0.15.38.2-3.2ubuntu0.25.38.2-3.2ubuntu0.3
5.38.2-3.2ubuntu0.4
perl-IO-Compress
openSUSE:Tumbleweed
 before 2.220.0-1.1
2.220.0-1.1
perl-IO-Compress
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 2.220.0-bp160.1.1
2.220.0-bp160.1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubJoakimBulow/CVE-2026-489622026-06-10

History

History
RecordedChangedSources
affectedOSV
affected, aliases, facts, referencesOSV
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-48962 is a high vulnerability (CVSS 7.3) in Pmqs Io::compress, published May 27, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. Fixed in perl 5.42.3-r0.

References

Show 91 moreShow less
This page doesn't list everything

Left out here: 378 package rows. The JSON record has them. Also not on the record: 254 package claims. ID and package lookups still check them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open