Skip to content
OpenAdvisories

Vendor

SHLOMIF

2 known vulnerabilities.

Products

Config::IniFiles 1 XML::LibXML 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2026-11527

    Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle

    Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_filehandle. Config::IniFiles::_make_filehandle opens a filename argument with Perl's 2-arg open(), so a filename…

    SHLOMIF Config::IniFiles libconfig-inifiles-perl perl-config-inifiles Debian Ubuntu Alpine
  • High 7.5
    CVE-2026-8177

    XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences

    XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the in…

    SHLOMIF XML::LibXML libxml-libxml-perl libxml-libxml-perl Debian Ubuntu Azure Linux