perl vulnerabilities (Alpaquita)
15 vulnerabilities.
perlAlpaquitaPod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width7.5 HighperlAlpaquitaPerl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass5.3 MediumperlAlpaquitaIO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob7.3 HighperlAlpaquitaIO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID7.3 HighperlAlpaquitaIO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward7.5 HighperlAlpaquitaIO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date5.5 MediumperlAlpaquitaArchive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header7.5 HighperlAlpaquitaArchive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory7.5 HighperlAlpaquitaArchive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory9.1 CriticalperlAlpaquitaHTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values6.5 MediumperlAlpaquitaPerl threads have a working directory race condition where file operations may target unintended paths5.9 MediumperlAlpaquitaPerl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes8.4 HighperlAlpaquitaPerl: write past buffer end via illegal user-defined unicode property7.0 HighperlAlpaquitaHTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an...8.1 HighperlAlpaquitaCPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.8.1 High