Nixpkgs security tracker

Dismissed

(max. allowed matches exceeded)

Permalink CVE-2026-60081

created 12 hours ago Activity log

Created & dismissed (max. allowed matches exceeded) suggestion 12 hours ago

DBI::ProfileData versions before 1.651 for Perl do not limit the path index

DBI::ProfileData versions before 1.651 for Perl do not limit the path index. The path index column of profile dump files is used to allocate an array of data for the parser. An unbounded value allows an attacker to specify a large index and consume available memory.

References

https://github.com/perl5-dbi/dbi/security/advisories/GHSA-ww49-w4mv-jrr4 vendor-advisory
https://metacpan.org/release/HMBRAND/DBI-1.651/changes release-notes
https://github.com/perl5-dbi/dbi/commit/6764e755e83ee1ebb1b40760e5b53eb50960bd7… patch
http://www.openwall.com/lists/oss-security/2026/07/14/14

Affected products

DBI

<1.651

Suggestion detail

References

Affected products