Score: n/a
Product: Text::CSV_XS
Vendor: HMBRAND
Updated: 2026-04-29

Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption.

The Parse, print, getline, and getline_all methods invoke registered callbacks (for exampl...

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26237

#cybersecurity #infosec #euvd #cve #vulnerability