By vendor

Perl vulnerabilities

Known CVEs affecting Perl products, prioritized by severity, with SEC.co remediation and detection guidance.

1 published vulnerability

• CVE-2026-14380HIGH 8.8

  DBI, a Perl database interface module, has a critical vulnerability in how it handles the Profile attribute. When this attribute receives untrusted input—from environment variables, direct code assignment, or database connection strings—DBI evaluates it as Perl code without proper validation. An attacker who controls any of these inputs can execute arbitrary commands on the affected system. The risk is particularly acute for exposed database brokers (DBI::Gofer or DBI::ProxyServer) where remote clients can inject malicious code through connection parameters.