Nixpkgs security tracker

Dismissed

(max. allowed matches exceeded)

Permalink CVE-2026-60081

created 1 week, 4 days ago Activity log

Created & dismissed (max. allowed matches exceeded) suggestion 1 week, 4 days ago

DBI::ProfileData versions before 1.651 for Perl do not limit the path index

DBI::ProfileData versions before 1.651 for Perl do not limit the path index. The path index column of profile dump files is used to allocate an array of data for the parser. An unbounded value allows an attacker to specify a large index and consume available memory.

References

https://github.com/perl5-dbi/dbi/security/advisories/GHSA-ww49-w4mv-jrr4 vendor-advisory
https://metacpan.org/release/HMBRAND/DBI-1.651/changes release-notes
https://github.com/perl5-dbi/dbi/commit/6764e755e83ee1ebb1b40760e5b53eb50960bd7… patch
http://www.openwall.com/lists/oss-security/2026/07/14/14

Affected products

DBI

<1.651

Suggestion detail

References

Affected products