Red Hat Security Advisory

RHSA-2026:30858

perl-IO-Compress security update

Released 2026-06-29 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2026-36219 CVE-2026-48962 · GHSA-q6wx-vhvq-x7h6

LOW 38

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00439 Published 2026-05-27 Fixed in 2.220 CWE-95