VYPR

rpm package

almalinux/perl-Date-Manip

pkg:rpm/almalinux/perl-Date-Manip

Vulnerabilities (1)

  • CVE-2026-60075HigJul 30, 2026
    affected < 6.85-3.el9_8.1fixed 6.85-3.el9_8.1

    Date::Manip versions through 7.00 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored time substitution in _parse_time. _parse_time removes a time from anywhere in the string with the unanchored substitution `s/$timerx/ /`, where $timerx is an auto-generat