Perl Tie::Hash::Regex Vulnerability Affects Data Processing
CVE-2026-77781

Currently unrated

Key Information:

Status
Vendor
CVE Published:
21 August 2026

What is CVE-2026-77781?

The Tie::Hash::Regex module in Perl prior to version 2.0.0 contains a vulnerability that leads to exceptions being thrown on malformed regular expressions when using the FETCH, EXISTS, and DELETE methods. This flaw arises because these methods lack adequate validation for external input, which can lead to application crashes when an invalid key is encountered. If an application relies on user-supplied strings to look up keys in a tied hash, it becomes susceptible to failure upon receiving improperly formatted keys, such as those with unmatched brackets. Developers are advised to upgrade to version 2.0.0 or later to mitigate this risk.

References

https://metacpan.org/release/DAVECROSS/Tie-Hash-Regex-2.0...
release-notes
https://github.com/davorg-cpan/tie-hash-regex/commit/4239...
patch

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.