CVE-2026-60081
DBI::ProfileData versions before 1.651 for Perl do not limit the path index
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
DBI::ProfileData versions before 1.651 for Perl do not limit the path index. The path index column of profile dump files is used to allocate an array of data for the parser. An unbounded value allows an attacker to specify a large index and consume available memory.
| CWE | CWE-770 |
| Vendor | hmbrand |
| Product | dbi::profiledata |
| Published | Jul 14, 2026 |
| Last Updated | Jul 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for hmbrand dbi::profiledata
Be the first to know when new high vulnerabilities affecting hmbrand dbi::profiledata are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
HMBRAND / DBI::ProfileData
0 < 1.651
References
github.com: https://github.com/perl5-dbi/dbi/security/advisories/GHSA-ww49-w4mv-jrr4 metacpan.org: https://metacpan.org/release/HMBRAND/DBI-1.651/changes github.com: https://github.com/perl5-dbi/dbi/commit/6764e755e83ee1ebb1b40760e5b53eb50960bd7a.patch openwall.com: http://www.openwall.com/lists/oss-security/2026/07/14/14