Skip to content
OpenAdvisories
High USN-8940-1 1 CVE

libxs-parse-keyword-perl vulnerability

Published Oct 20, 2026 · Updated Oct 21, 2026

Ecosystem: Ubuntu

Summary

It was discovered that the Perl XS::Parse::Keyword module did not
correctly handle certain inputs. If a user or automated system were
tricked into receiving specially crafted input, an attacker could cause
a denial of service.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 26.04 LTS 26.04:LTS libxs-parse-keyword-perl 0.49-1ubuntu0.1
Ubuntu · 26.10 libxs-parse-keyword-perl 0.49-1ubuntu1

Vulnerabilities 1

  • High 7.5
    CVE-2026-85644

    XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array reference

    XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array reference. The wrapper function XS::Parse::Infix generates for a list-associative infix operator checks whether arguments are array references, but it tests using SvRV() rath…

    libxs-parse-keyword-perl libxs-parse-keyword-perl Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2026-85644