Memory Exhaustion Vulnerability in DBI::ProfileData for Perl
CVE-2026-60081

Currently unrated

Key Information:

Vendor

Hmbrand

Status
Dbi::profiledata
Vendor
CVE Published:
14 July 2026

What is CVE-2026-60081?

DBI::ProfileData prior to version 1.651 for Perl is vulnerable due to a lack of limitation on the path index column in profile dump files. This flaw can be exploited by attackers who provide excessively large index values, leading to significant memory consumption. If successfully exploited, it may allow an attacker to hinder service availability and disrupt normal operations of the affected systems. It is crucial for developers and system administrators to update to the latest version to mitigate this vulnerability.

Affected Version(s)

DBI::ProfileData 0 < 1.651

References

https://github.com/perl5-dbi/dbi/security/advisories/GHSA...
vendor-advisory
https://metacpan.org/release/HMBRAND/DBI-1.651/changes
release-notes
https://github.com/perl5-dbi/dbi/commit/6764e755e83ee1ebb...
patch

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.