libtext-csv-xs-perl vulnerabilities (Debian)
9 vulnerabilities.
-
libtext-csv-xs-perlDebian Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parse 9.8 Critical -
libtext-csv-xs-perlDebian Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespace 7.5 High -
libtext-csv-xs-perlDebian Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used as numbers without quotes in combine 9.8 Critical -
libtext-csv-xs-perlDebian Text::CSV_XS versions before 1.65 for Perl drop the end of a record and its line ending when a UTF-8 flagged field precedes invalid UTF-8 bytes in print 9.8 Critical -
libtext-csv-xs-perlDebian Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder per record of CR-only input in getline 7.5 High -
libtext-csv-xs-perlDebian Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline 6.5 Medium -
libtext-csv-xs-perlDebian Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns variables when skip_empty_rows skips an empty line in getline 9.8 Critical -
libtext-csv-xs-perlDebian Text::CSV_XS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index of an RFC 7111 selector in fragment 7.5 High -
libtext-csv-xs-perlDebian Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption 8.4 High