VYPR

Data::Dump::Streamer

by Perl Foundation

CVEs (1)

  • CVE-2026-126673Nov 12, 2026
    risk 0.00cvss —epss —

    Data::Dump::Streamer versions before 3.00 for Perl allow code injection via unescaped Regexp patterns in _dump_qr. A Regexp's pattern is written into a qr literal without escaping "$" or "@", so "@{[ ... ]}" and "${\ ... }" in the pattern run as code when the dump is evaluated.…