CVE-2026-60081CWE-770

DBI::ProfileData versions before 1.651 for Perl do not limit the path index

High · published July 14, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
49.5
In the wild
Unconfirmed
What it is

DBI::ProfileData versions before 1.651 for Perl do not limit the path index.

The path index column of profile dump files is used to allocate an array of data for the parser. An unbounded value allows an attacker to specify a large index and consume available memory.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00630 · 49.5th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-07-14T15:34Z
EPSS history
Timeline
  • 14 JUL 15:34Z
    DBI::ProfileData versions before 1.651 for Perl do not limit the path index
    cvelistv5