PM
Vendor
PMQS
5
CVEs
0
On KEV
0
New 30D
Products
IO7.3
IO::Compress
PMQS
2 CVEs0 on KEV0 new
IO7.5
IO::Uncompress::Unzip
PMQS
2 CVEs0 on KEV0 new
CO9.8
Compress::Raw::Zlib
PMQS
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-48962 | IO IO::Compress PMQS | 7.3 | May 27 | IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob |
| CVE-2026-48961 | IO IO::Compress PMQS | 7.3 | May 27 | IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID |
| CVE-2026-48959 | IO IO::Uncompress::Unzip PMQS | 7.5 | May 27 | IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward |
| CVE-2025-15649 | IO IO::Uncompress::Unzip PMQS | 5.5 | May 27 | IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date |
| CVE-2026-3381 | CO Compress::Raw::Zlib PMQS | 9.8 | Mar 5 | Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib |