TI-2026-36359 CVE-2026-49146 · GHSA-hf7w-mcpw-97mf
Resource allocation without limits in PETDANCE App::Ack
Priority MEDIUM 40
App::Ack versions before 3.10.0 for Perl allow memory exhaustion via an unbounded context value in a project .ackrc.
No PETDANCE vulnerabilities are listed in CISA KEV.
3 records
App::Ack versions before 3.10.0 for Perl allow memory exhaustion via an unbounded context value in a project .ackrc.
App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output modes.
App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from in a project .ackrc.