IO
Product
IO::Compress
by PMQS · last CVE May 27, 2026
2
CVEs
0
On KEV
7.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch

Add IO::Compress to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-48962
7.3
0%
May 27
IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob
Affected: before 2.220
CVE-2026-48961
7.3
0%
May 27
IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID
Affected: 2.207 before 2.220
Showing 2