Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cpan

Storable

cpan

persistence for Perl data structures

View on github.com · View on metacpan.org

Security Advisories for Storable in cpan

Potential
Moderate
21 days ago

Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass. CPANSA-perl-2026-19487

cpan perl
Potential
Moderate
25 days ago

Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch. CPANSA-perl-2026-15534

cpan perl
Potential
about 2 months ago

Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk. When such branches are combined into a trie, the delta between... CPANSA-perl-2026-13221

cpan perl
about 2 months ago

Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record. retrieve_hook_common reads a signed 32-bit item count from an SX_HOOK record and calls av_extend with that count plus one. A count of I3... CPANSA-Storable-2026-57433

cpan Storable
Potential
about 2 months ago

Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack. S_measure_struct adds each item's size times its repeat count to a running total with no overflow check, so a large re... CPANSA-perl-2026-57432

cpan perl
Potential
3 months ago

Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, pack_ip_mreq_source() checks the length of its source argument before the argument is read, so the check tests the byte length carried over from the preceding multiad... CPANSA-Socket-2026-12087

cpan Socket
Potential
3 months ago

Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds. Perl_study_chunk in regcomp_study.c checked the size of the joined substring buffer in characters rather than b... CPANSA-perl-2026-8376

cpan perl
5 months ago

Storable versions before 3.05 for Perl has a stack overflow. The retrieve_hook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could ... CPANSA-Storable-2017-20230

cpan Storable
Potential
5 months ago

Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib. Compress::Raw::Zlib is included in the Perl package as a dual-life core module, and is vulnerable... CPANSA-Compress-Raw-Zlib-2026-4176

cpan Compress-Raw-Zlib
Potential
over 1 year ago

Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle ... CPANSA-perl-2025-40909

cpan perl
Potential
over 1 year ago

A heap buffer overflow vulnerability was discovered in Perl. When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`. $ perl -e '$_ = "\x{FF}" x 1000000; tr/\xFF/\x{100}... CPANSA-perl-2024-56406

cpan perl
Potential
about 3 years ago

In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation. CPANSA-perl-2022-48522

cpan perl
Potential
over 3 years ago

In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0. CPANSA-perl-2023-47100

cpan perl
Potential
about 5 years ago

Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library (in the current working directory) that preempts dynamic module loading. Exploitation requires an unusual configurati... CPANSA-Encode-2021-01

cpan Encode
Potential
High
about 6 years ago

regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls. CPANSA-perl-2020-12723

cpan perl
Potential
High
about 6 years ago

Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow. CPANSA-perl-2020-10543

cpan perl
Potential
High
about 6 years ago

Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection. CPANSA-perl-2020-10878

cpan perl
Potential
Critical
over 7 years ago

Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations. CPANSA-perl-2018-18311

cpan perl
Potential
Critical
over 7 years ago

Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory. CPANSA-perl-2018-18313

cpan perl
Potential
Critical
over 7 years ago

Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations. CPANSA-perl-2018-18314

cpan perl
Potential
High
over 8 years ago

An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure. CPANSA-perl-2018-6798

cpan perl
Potential
Critical
over 8 years ago

Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a large item count. CPANSA-perl-2018-6913

cpan perl
Potential
Critical
almost 9 years ago

Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 on Windows allows attackers to execute arbitrary code via a long environment variable. CPANSA-perl-2017-12814

cpan perl
Potential
High
almost 9 years ago

Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service (out-of-bounds write) via a regular expression with a '\\N{}' escape and the... CPANSA-perl-2017-12837

cpan perl
Potential
Critical
almost 9 years ago

Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or cause a denial of service (application crash) via a crafted regular expre... CPANSA-perl-2017-12883

cpan perl
Potential
Critical
over 9 years ago

The VDir::MapPathA and VDir::MapPathW functions in Perl 5.22 allow remote attackers to cause a denial of service (out-of-bounds read) and possibly execute arbitrary code via a crafted (1) drive letter or (2) pInName argument. CPANSA-perl-2015-8608

cpan perl
over 9 years ago

Malcrafted storable files or buffers. CPANSA-Storable-2017-01

cpan Storable
Potential
High
about 10 years ago

The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan horse library under the current working directory. CPANSA-perl-2016-6185

cpan perl

Filter by Severity

Critical 7 High 6 Moderate 2