CVE-2026-60082
DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row
CVSS Score
9.1
EPSS Score
0.0%
EPSS Percentile
0th
DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row. When the statement handle had no fields but the source row was non-empty, the internal row-buffer helper would read from a negative array index. This could be triggered by a caller supplying inconsistent metadata and rows to the prepare method.
| CWE | CWE-125 |
| Vendor | hmbrand |
| Product | dbi |
| Published | Jul 14, 2026 |
| Last Updated | Jul 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for hmbrand dbi
Be the first to know when new critical vulnerabilities affecting hmbrand dbi are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
HMBRAND / DBI
0 < 1.651
References
github.com: https://github.com/perl5-dbi/dbi/security/advisories/GHSA-rwhc-hhmv-cjvg metacpan.org: https://metacpan.org/release/HMBRAND/DBI-1.651/changes github.com: https://github.com/perl5-dbi/dbi/commit/397868704291bbf0989b97e2c0661189890653e2.patch openwall.com: http://www.openwall.com/lists/oss-security/2026/07/14/13